not use encrypted data bags