This has been requested in:
Am I correct in assuming that mounted (and unlocked) vaults can be read by any user process?
If so, it would make sense to auto-lock vaults as soon as they haven’t had any read or write activity for a while.
@overheadhunter , any updates?