changed databag encryption level to default to :no