updated w/ path to encrypted_data_bag_secret