Ceph » rgw

The existing logic in rgw to use hashicorp vault transit encoding
does not make good use of the transit feature. It should be
encrypting locally stored secrets. Instead it's being used
as a simple key store.

In addition, aws s3 defines a "x-amz-server-side-encryption-context"
that contains data that should perturb the datakey calculation,
and hashcorp vault transit encoding includes a context parameter
that serves the very same purpose. This attribute should be
implemented and given to vault.