With Hashicorp's Vault, is it possbile to generate a secret without revealing that secret to the user who generated it?
Along the lines of:
vault generate secret/my/awesome/secret 32
Where it would generate a string of 32 random characters, will store that in Vault, and will not show the resulting value to the user who created it without them without them explicitly requesting it with a
vault kv get
operation?
After a quick reading the Vault docs I was sure this would be possible but now that I've gone looking for details about how to do it I'm finding so little info that I'm not sure it's possible [yet].