[CHEF-5356] Encrypted data bags should use different HMAC key and include the IV in the HMAC

https://tickets.opscode.com/browse/CHEF-5356
Also, do we have documentation suggesting a recommended way to generate the encryption keys? This halves the effective entropy we're using for the key, which means we should recommend to create keys 2x the size, right?