Support per-vault authentication

[DRK3]

The current authentication support only allows for clients to be authorized server-wide instead of per-vault. Server-wide authorization isn't as secure as per-vault since any authorized user can access any vault/document if they know the ID.