The security schema in AS7.1 has a new vault element that can be used to configure the attribute vault. An offline tool is needed to interact with the vault to store the attributes. The AS is supposed to be a read only customer of the vault.
The proposal is to create bin/vault.sh (vault.bat) to interact with the default implementation of the vault.