I played with Vault and it wasn't quite as simple as Consul and Nomad. My major issue was trying to figure out how I would "unlock" the Vault automatically in case of a system restart.

I punted for now and just stored sensitive values directly in Consul encrypted.