It would seem in this design that all the tools should be called through a wrapper that understands the vault and provides the credentials to the tool in the ri

It would seem in this design that all the tools should be called through a wrapper that understands the vault and provides the credentials to the tool in the right way. How otherwise can curl use the credentials? Curl has no idea that there's a vault somewhere