ca: split Primary/Secondary Provider
ca: split Primary/Secondary Provider

To make it more clear which methods are necessary for each scenario. This can
also prevent problems which force all DCs to use the same Vault instance, which
is currently a problem.

hashicorp/consul,hashicorp/consul,hashicorp/consul,hashicorp/consul