What’s the difference between this and using a secret manager like Vault?