cli.vault