use chef-vault w/ data bag item loading fallback