Keep data bag secret out of git.
Handled all encryption TODOs, first pass at production deploy.