[CHEF-5356] Encrypted data bags should use different HMAC key and include the IV in the HMAC

https://tickets.opscode.com/browse/CHEF-5356
Since this is a new version of this feature, how about we require a minimum secret length?