WHY: When a service is added or removed, there is nothing that makes sure that the service passwords that should be there are there.
DONE: This will be done when every single run that deals with services makes sure that the vaulted/etc. passwords that we need to have set are set.
HOW: Every single time that we run install_services or install_skeleton, we want to run the script to vault passwords. That script should also be rewritten to be idempotent.