My thinking -- the module should have two config options -- 'extension' which will default to [".vault.js", ".vault.coffee"] and 'secretpath' which will default to ~/.mimosa/vault/{projectname}.key files which end with matching extension should export an object which maps a list of service:string -> username:string -- representing a username/api key for which a secure password should be derived. The module will process these .vault.{coffee,js} files into a new json file which maps 'service'->['username', 'vault_derived_secret']