Vault is single system, accessible over the network with root access to all datastores in the company... How is it good for security? Kerberos solves very sam

Vault is single system, accessible over the network with root access to all datastores in the company... How is it good for security? Kerberos solves very same problem of using only short lived tokens on the wire when accessing services, but it fall out of fashion .