vault: vault server -dev
systemd-vaultd: go run . -secrets tmp/secrets -sock tmp/sock