Add support for storing OSSEC keys in an encrypted data bag

Since we use a data bag to store the OSSEC SSH certificate, we should really support encrypted data bags. I've left the default to false for backwards compatibility. Also, making the data bag name and item configurable.