Default to using  if  is not set
Add the ability to use an encrypted data bag
Add the ability to configure the permissions/mode of the generated file
Merge pull request #1 from prognostikos/master

A few security-related features