pass.vault
/roles/certificates/files/*
/roles/secrets/files/*