[chef] Deploying User Private Keys

[Curtis Stewart < >]

I’m currently using the opscode-cookbooks/users cookbook to deploy system 
users.

The users_manage resource uses data bags to deploy users, and this does allow 
you to set an ‘ssh_private_key’ attribute, however, I don’t want to store our 
private keys as plain text in our repository.

My plan is to use ChefVault to deploy users private keys (encrypted data bags 
and a template/file resource), after the users have been created with the 
users_manage resource.

Does anyone have suggestions for a better method, or best practice for this 
case?

Thanks,
Curtis