needs vault pass file