Add vault-credmon configuration

All access points (formerly submit machines) will need to run the credd and credmon_oauth daemons to support user tokens in jobs, so we should pick the best implementation we have and centralise that.