Add Vault permissions bridge