vault cert pub/priv keys no longer required to be at index 0 of store