Gracefully fail encrypted_data_bag_item

Right now, we go :boom: when `Chef::Config[:encrypted_data_bag_secret]` is not set. We should be nicer about that, maybe even link to a docs page or something magical. Because user-experience is a thing.

/cc @schisamo