Another one about hooks: It would probably be good to introduce a kind of security feature... like explicitly allowing hooks via a config flag for vaults in your workspace.... Just imagine you download and use a vault - and it has a malevolent hook 😉