Provide a dedicated path for workload clusters in the vault

Workload clusters should have access to a decicated path (so that a user from a workload cluster cannot access the secrets of another workload cluster) in the vault.