I think I should be doing it at the vault level when sharing a vault, but looking through the docs and scratching my head