A vault whose key you can keep in .env on purpose