[CHEF-5356] Encrypted data bags should use different HMAC key and include the IV in the HMAC

https://tickets.opscode.com/browse/CHEF-5356