add ohai plugin "pci", disable it by default
FC045: Consider setting cookbook name in metadata: ./metadata.rb:1, bump version to 0.18.2
decrypt should not return junk, but nil on error
add attribute for ca-file to ldap.conf