Thom May

So you seem to be using `-M client` in some commands but not in others. If you use it consistently, does the problem go away? Also, you're using a really...

@powellchristoph same questions to you - are you using `-M client`, what version of chef, chef-vault, etc. And some output of your knife commands would help.

@powellchristoph so what is actually happening, are you expecting vaults on a chef server or locally?

I suspect this is another instance of #92 - @petecheslock if you do `"role:api_server AND chef_environment:#{node.chef_environment} OR NOT tags:hidden"` do you still get both nodes returned?

Setting as reasonably high since we shouldn't crash.

policies and policy_groups would both need to be supported.

If this does get clarified it would be delightful to flip the whole thing and clarify that only some contributors/maintainers contribute code (and hence doing so is not a pre-req).

yeah, let's pull it into a separate gem under chef/chef and version and pin the same way as for chef-config.

Yes, that's a threat, although you can reasonably mitigate it by changing the ACLs on your data bags and data bag items to make clients read only

yes, conceivably. It's unlikely I have time to do that work though, but if you'd like to submit a PR I'd help you get it merged.