Support inline secrets

[jesseops]

I should be able to include an encrypted string (eg, database password, certificates, etc) using a standardized tag. This could work similar to the way Ansible does inline secrets.

http://docs.python-guide.org/en/latest/scenarios/crypto/