This was I think more an issue of integrating it with other bits of infrastructure. Things like access control provisioning namespaces. The folks who were on the receiving end of the security team's bullshit were quite capable of getting vault setup but bogged down by mediocre management.

I think we ended up using KMS instead (much to the chagrin of everyone).