Hashicorp Vault has facility to auto generate server/client cert for authentication. https://vaultproject.io/docs/secrets/pki/index.html
While it makes sense from certificate management point of view, I am having difficulty seeing the actual use case for it? E.g. IPSec/L2tp uses certificate for authentication, but that's so much fluffing around. (Auth against vault, download cert, set up vpn. For every single time.)
I can see that being useful in a custom developed application, but don't see its usefulness outside of that. Are there use-cases that I'm missing?