I just wrote all this code before going to sleep last night.

sudo docker-volume-vault -token <your-root-vault-token> -url <url-to-vault>

docker run --volume-driver vault --volume secret/foo:/etc/secret