I had to kill a rollout of Vault at one billion dollar (revenue) company for the following reasons:
* the engineers doing the PoC could not/would not document how to operate it in production
* the managers did not take the unsealing responsibility seriously ("I'm in mgmt., don't call me on Sundays again.")
* our network was perceived as flaky.
Some cheap solutions are:
* provide some pre-written runbooks for administering Vault that people can cut-and-paste into their wiki
* provide some diagrams and scenarios for unsealing that can be adopted
* have the Vault server monitor and log network health (latency, bad packets, etc.)