Don't know how to cleanly this problem.  I don't know if there's an easy way to check if a data bag is encrypted.

my solution is to try to decrypt it and rescue on failure.