You could also use convergent encryption (https://www.vaultproject.io/docs/secrets/transit#convergent-encryption https://www.vaultproject.io/docs/secrets/transi

You could also use convergent encryption (https://www.vaultproject.io/docs/secrets/transit#convergent-encryption https://www.vaultproject.io/docs/secrets/transit#convergent-...) to do this with only one field.