add encrypted prod config, scripts for encryption, and draft provisioning for staging/production server