vault/unseal-key

certmanager acme challenge dns01 provider

The key generated by initializing vault in KMS mode. Use this to unseal vault if KMS becomes unavailable. Store this somewhere secure, and delete from DRP, for confidence