def mock_encrypted_databag(bag, key, return_value)
  stub_data_bag_item('encryption_keys', 'databag_encryption_key').
    and_return({ 'id' => 'databag_encryption_key', 'key' => 'secret' })

  allow(Chef::EncryptedDataBagItem).to receive(:load_secret).
    and_return('secret')

  expect(Chef::EncryptedDataBagItem).to receive(:load).
    with(bag, key, 'secret').
    and_return(return_value)
end