Add decrypted variable support

[rmbl]

I'm using this to allow secrets in the repository which get automatically decrypted when running serverless. In my case this is the password for a rds db instance.

Usage:

custom:
    variable: ${decrypt:decryptedVariable}

I don't expect this to be merged as it needs async/await support in node which would require a version >= 7.6