vault subdomain