Delegated vault