only write encrypted_data_bag_secret if needed

Change-Id: I80e0389c496d30a4696af754c3a699674835c20e