It would be nice if vaultenv had a flag to allow it to override environment variables. This would of course need to be used with care, but would allow it to be combined with another solution that loads secrets into environment variables.