Encrypt RDS instances by default

We generally want our client's data to be encrypted at rest and in transit. Since the encryption setting is very difficult to change once the database is deployed, we should always use true unless we know the cluster is only going to be used for tests or dev purposes.