a single log line in proton mail bridge wrote sha256(vaultkey) to a world-readable file, and that digest is the AES key for vault.enc
