Add ability to encrypt database.yml from fix_auth

There is an issue when a customer upgraded to 5.3 but hadn't hardened the databse yet.

We need a way to re-encrypt `database.yml`. It is tricky since we can't use `rails runner` when there is an invalid `database.yml` - chicken and egg.

https://bugzilla.redhat.com/show_bug.cgi?id=1141299