configures encrypted smtp provider

sets a sane default for the data bag name and only attempts to use encrpyted
credentials when the smtp provider is given (backwards compatible).

the key names are long but descriptive.