add encrypted data bag support