encrypt access_key_id, add opsworks back