PropertySourceVault is hardcoded to look for vault.properties in catalina.home if set (always?). So there's no reasonable way to try to provide this config elsewhere. It would help for this to be enhanced so vault.properties can be placed elsewhere as needed (for instance in catalina.base instead).