refactoring to allow certificate updates under other Vault mountpaths
What
Refactoring to allow the Vault client to access other mountpaths.
Why
For production-engineering#24883 (closed), the certificate concerned is located under the ci/
mountpath.