My hot take is just that Vault isn't a good solution, and the permissions model is wholly inadequate. Except for not "feeling" secure, the only thing everyone

My hot take is just that Vault isn't a good solution, and the permissions model is wholly inadequate. Except for not "feeling" secure, the only thing everyone wants is a Windows AD file share with ACLs. Just no one realises this: all the Vault on disk encryption and unsealing stuff is irrelevant - it's solving a problem handled at an entirely different level.