Ensure you can auto delete the vaults by default, locking deletes scm, unlocking deletes.env, all optionally
To-do
Task