Tag map

This is so that we can do something like `foo: !encrypted "ABC123"`

/cc @startling