* Add clusterrolebinding, fix service, update Vault * Change authDelegator to false by default * Clarify clusterIP comment