Thanks very much for your response and suggestions. I am going to have to go to the source code a bit as the vault client can not seem to ready the encryption keys from the keytab that I using to try and login. I even tried having just a single encryption type that is supported but that does not work either. I guess this is not a super well desired functionality and I may end up using approles to do what I need.