A CLI vault that stores AWS IAM credentials in the OS keystore and exposes short-lived session credentials to shells and apps.