It's possible (and likely) that when we update the Vault image that the SHA256 of the plugin will also change. Automatically update that as the last step of the deploy.
This is a Vault secrets plugin for provisioning SSL certificates using ACME.
This is the Docker image I use for deploying Vault.