#!/bin/bash
# Thin wrapper around vault kv get for scripts that need secrets at runtime.
# Usage: source lib/vault.sh && vault_get "secret/nexus/db" "password"

vault_get() {
    local path="$1"
    local field="$2"
    vault kv get -field="$field" "$path"
}