The more I think about this the more convinced I am that to make eyaml as flexible as possible in other ways, we should mandate the format pretty strongly. In so far as a eyaml value can be any sort of value, but if it is encrypted then the value is ^ENC[]$ possibly allowing for whitespace at the beginning and end, but certainly not allowing a mix of multiple encryptions or plain text and an encryption or anything like that.

Puppet is powerful enough to do that sort of stuff either in manifests or templates and I strongly believe that eyaml should not be another place for doing templating.

Feel free to shout me down :)