Clarify where vault is populated

[pbeshai]

As per @tkellen's request, here's a PR clarifying how the secrets variable is setup. In particular, I initially found it confusing thinking that vault was a special keyword since I hadn't looked inside the secrets.yml file.

[boazsender]

Thanks @pbeshai!