Agreed, but as OpenVPN has shown us, it's not a guarantee that security will be any better if everything is contained within a single process. It's also possib

Agreed, but as OpenVPN has shown us, it's not a guarantee that security will be any better if everything is contained within a single process. It's also possible to use something other than Vault, you could use LDAP for example, but Vault lets you use multiple authentication mechanisms, and can be used for other purposes, so it's kinda a multi-tool. Additionally, I'm not using consul, just Postgres on the same host as Vault.