[CHORE] vault client: get 2fa HMAC instead of ECDSA