fix: list vaults

resp had sneaked in, instead of response. while setting
the resp.body