Is Vault capable of generating SecretKey(s) on its own?

How to generate Java’s SecretKey using Vault?

We would like to encrypt our users’ data but delegate the process of generating and storing Java’s SecretKey to Vault.

Ultimately, Vault would be also able to generate a secret key every X days and send an appropriate event.

Is there a way to accomplish that?