refactor(pdk) vault to have internal and external apis
refactor(pdk) vault to have internal and external apis

### Summary

Add a little bit of indirection to keep external apis separate from internal ones.

Kong/kong,Kong/kong,Kong/kong