vault::cred now supports CRED_TYPE_DOMAIN_* with /patch