The idea bebind this is to be able to give vault access to new DevOps members without giving away more important credentials like Hetzner's.