salt/base/consul/files/conf.d/security.json

{
  "encrypt": "{{ consul_secret }}",
  "disable_remote_exec": true
}