The vault supports Subnet Based Access Control.