I wrote a n8n external-secrets <-> HashiCorp Vault shim so you don't have to (medium.com)