wip on client/vault interface.