Add p6 Deferred function

[binford2k]

This allows node_encrypt to be used for any parameter of any resource
type, by simply tagging the secret with a function call.

Example usage:

notify { 'example':
  message => 'this string will be encrypted in your catalog'.node_encrypt::secret
}

file { '/etc/secretfile.cfg':
  ensure  => file,
  content => template('path/to/template.erb').node_encrypt::secret,
}

I'll do proper docs after more testing.

[danielparks]

Wow, that's awesome.

[binford2k]

I should point out that using Sensitive means that it's subject to the same leakage problems that Sensitive is, since it relies on providers implementing their half.

[danielparks]

I tested this with the command parameter of an exec, and it works nicely. It has the desired result, and the cipher text is all that shows up in PuppetDB.

[binford2k]

Spec and smoke tested on 3/4/5/6.