Populate vault secrets as file system objects & use consul's distributed lock to synchronize operations