audittrail: support encrypting files with Vault

[adamdecaf]

Instead of using GPG we should offer Vault as a method to encrypt each file. This could use the transit backend.

[zbruhnke]

This would be AWESOME for our use cases