Let's talk about the environment and data bag schemas tomorrow. In general, I'm thinking having environment-named data bags (like 'dev'), and then having data bag items inside to group application configs, like 'postgres' and 'newrelic'. For consistency, the same schema hierarchy would be found in the environment configs (i.e. 'postgres' and 'newrelic' hashes). However, the sensitive data of the schema would be found in the data bags (so we could encrypte later if we wish to), with the public portions found in the environment, or else in the attributes of the wrapper cookbooks.