Also interested in this, we have a fairly large setup and always interesting to see how others use it.
Especially around Vault, it never really clicked for me, I fail to see how it helps most of the times, if a user can trigger X that will generate a key on the fly, what prevents a hacker from doing the same, etc...