Make vault.py a cis thing and call person api instead

[gdestuynder]

There is a note for this in the code, its just the matching issue

[andrewkrug]

There's not an open github issues for this... but this issue depends on having a batch user retrieval in person-api. Will likely wait to do this until the profile v2 refactor.