Implementations of EST/SCEP for Vault PKI

I’m wondering if anyone has any experience with using Vault’s PKI in conjunction with EST (Enrollment over Secure Transport) or SCEP ( Simple Certificate Enrollment Protocol).

I’d like to have IoT devices be able to acquire certificates using one of these protocols, but I haven’t been able to find any examples of using Vault as the PKI. Does anyone have any experience/references for this?