Add optional encoding argument to #secure_password

Fixes #12, provides a backwards-compatible default argument to `Opscode::OpenSSL::Password#secure_password` that allows callers to force an encoding in their random passwords.
Call #to_pem before recipe DSL

Fixes #10, calls `#to_pem` on cert and key before passing local variables to `Chef::Resource::File`.