I may be missing an obvious reason why this is a bad idea, but can you setup Vault so you log into it using OneAuth's MFA? It seems odd to be using a text password for Vault but I don't understand how to change it to MFA.