be good to be able to token stream from a vault