Use the helper function to get vault_pass

This always calls the function to get a keyring password without
requiring "--ask-vault-pass" to be passed as an arg - allowing for
seamless vault use.