Really wanted to try this, and am still looking forward to at some point, but for some reason my password is invalid to the client and presents 'M_FORBIDDEN: Invalid password' despite it being a cryptographically secure random-gen password in my vault - presumably because it doesn't have a special character in it.

It would be cool if this limitation was a little more up front - While I can spin up a copy on my own and adjust the limitation myself, I don't think everyone's going to want to do that.