can vault agent support multiple approles with different access policies?
You can start multiple agents