> The problem with Hashicorp Vault (and their peers): Your application still need a secret to access values made available to your application's role. True but

> The problem with Hashicorp Vault (and their peers): Your application still need a secret to access values made available to your application's role. True but those credentials can be decoupled from the application (like env vars are) so you satisfy the developer problem I was addressing.