- enable vaults PKI engine and integrate with consul for auto tls provisioning - https://developer.hashicorp.com/consul/tutorials/vault-secure