[backport] fix(vault): vault references may be dropped from rotation

[backport] fix(vault): vault references may be dropped from rotation #3878