Keep sensitive information out of node attributes

Sensitive information stored in data bags (such as passwords) should
not be stored as node attributes, because they are persisted back to
the server and can therefore be easily retrieved.

Change-Id: I26c1fc1d49a86d8f9ccb6f1a80af90a781c1a80c