Bump to ChefSpec 3, fix tests, assert against encrypted data bag