title: Forbidden errors at app initialization when using spring cloud vault
body: <p>Using Spring Cloud HOXTON.SR6, with Spring boot 2.3.2</p>
  <p>When initiating the service, i get 403 errors trying to access &quot;/secret/application&quot; and &quot;/secret/application/{profile}&quot;. The &quot;application&quot; in those paths should be replaced by my application name.</p>
  <p>Error:</p>
  <pre><code>[RequestedSecret [path='secret/application/{profile}’, mode=ROTATE]] Lease [leaseId='null', leaseDuration=PT0S, renewable=false] Status 403 Forbidden [secret/application/{profile}]: 1 error occurred: * permission denied ; nested exception is org.springframework.web.client.HttpClientErrorException$Forbidden: 403 Forbidden: [{&quot;errors&quot;:[&quot;1 error occurred:\n\t* permission denied\n\n&quot;]} ] org.springframework.vault.VaultException: Status 403 Forbidden [secret/application/{profile}]: 1 error occurred: * permission denied ; nested exception is org.springframework.web.client.HttpClientErrorException$Forbidden: 403 Forbidden: [{&quot;errors&quot;:[&quot;1 error occurred:\n\t* permission denied\n\n&quot;]} ]
  </code></pre>
  <p>The replacement works correctly and the erros are gone if i set spring.cloud.vault.generic.enabled = false.
  The problem is that this property is set for deprecation. Then what would be the way around it?</p>
  <p>The errors are present with:</p>
  <pre><code>spring:
      cloud:
          vault:
              authentication: approle
              app-role:
                  role-id: &lt;&lt;role-id&gt;&gt;
                  secret-id: &lt;&lt;secret-id&gt;&gt;
              kv:
                  enabled: true
                  backend: secret
                  application-name: &lt;&lt;application-name&gt;&gt;
                  default-context: &lt;&lt;application-name&gt;&gt;
              host: &lt;&lt;vault-host&gt;&gt;
  </code></pre>
  <p>But not anymore with:</p>
  <pre><code>spring:
      cloud:
          vault:
              authentication: approle
              app-role:
                  role-id: &lt;&lt;role-id&gt;&gt;
                  secret-id: &lt;&lt;secret-id&gt;&gt;
              kv:
                  enabled: true
                  backend: secret
                  application-name: &lt;&lt;application-name&gt;&gt;
                  default-context: &lt;&lt;application-name&gt;&gt;
              generic:
                  enabled: false
              host: &lt;&lt;vault-host&gt;&gt;
  </code></pre>
  <p>Should i be using this differently?</p>