Add support for managing id_rsa and id_rsa.pub to the recipe
Required adding awareness of the encrypted data bag USER_secrets
Changes the default behaviour for password to be "*" if not given