where to encrypted vault location