some documentation additions

The data bag in the example was named wrong, it is hardcoded to `ssl-vault`.
Also the parameter `--name` was no longer supported with my recent knife-vault installation.
I switched to `knife vault` instead of `encrypt`, since this seems to be the idiomatic way of doing thing now.
I also added a section about the data bag structure, adding the undocumented `chain_certificates` key.