Add Circle CI config.

At present this doesn't work because of the vault pw
requirement.