build.sh: deploy needs vault password