fix ENC config (2nd attempt)

Actually, we need to pass an empty string to actually disable the ENC
using upstream Puppet module.

refs tpo/tpa/team#42096