fix vault copies back to build host