This strictly forces using an encrypted data bag item.