@csquared explained how it works in Campfire.  We're going to use the
heroku-vault@herokumanager.com API key.