Use berkshelf. New fresh vagrant box with Chef 11. Cookbook to load secrets from data bags into attributes.