Thanks. Turns out it was a typo invault.yaml which the parser didn’t pick up. YAML, oh how I hate thee
vault.yaml