A Vault setup to use a Deferred function to look up secrets from Vault using the agent's cert as authentication - View it on GitHub