It presumably defaults to whatever first vault that code path sees, so because of a race condition the shared vault could appear before the private one and thus becomes the default.