Remove data_bag_key after "cooking" server

[tjwallace]

I think it would be more secure if after a server has been chef'd/cooked, the data_bag_key was removed.

[matschaffer]

The "clean" command was made for this exact case. Though the changes I'm
working on in #199 would probably make it easy to remove just the key file
rather than removing everything like clean does.

-Mat

On Mar 4, 2013, at 9:56, Jeff Wallace notifications@github.com wrote:

I think it would be more secure if after a server has been chef'd/cooked,
the data_bag_key was removed.

—
Reply to this email directly or view it on
GitHubhttps://github.com//issues/218
.

[tmatilai]

The directory where the key is uploaded is now read protected from anyone else than the owner. I think this is enough for most cases, isn't it?

[matschaffer]

Closing since it's been awhile since the question was asked and we do now keep the key in a user-space protected location.