envconsul hangs forever when it can't fetch from vault

output

$ envconsul -log-level=debug -config config.hcl /bin/true
2018/03/22 09:52:16.591266 [INFO] envconsul v0.7.3 (daa2947)
2018/03/22 09:52:16.591369 [INFO] (runner) creating new runner (once: false)
2018/03/22 09:52:16.592011 [DEBUG] (runner) final config: {"Consul":{"Address":"","Auth":{"Enabled":false,"Username":"","Password":""},"Retry":{"Attempts":12,"Backoff":250000000,"MaxBackoff":60000000000,"Enabled":true},"SSL":{"CaCert":"","CaPath":"","Cert":"","Enabled":false,"Key":"","ServerName":"","Verify":true},"Token":"","Transport":{"DialKeepAlive":30000000000,"DialTimeout":30000000000,"DisableKeepAlives":false,"IdleConnTimeout":90000000000,"MaxIdleConns":100,"MaxIdleConnsPerHost":5,"TLSHandshakeTimeout":10000000000}},"Exec":{"Command":"/bin/true","Enabled":true,"Env":{"Blacklist":[],"Custom":[],"Pristine":false,"Whitelist":[]},"KillSignal":2,"KillTimeout":30000000000,"ReloadSignal":null,"Splay":0,"Timeout":0},"KillSignal":2,"LogLevel":"debug","MaxStale":2000000000,"PidFile":"","Prefixes":[],"Pristine":false,"ReloadSignal":1,"Sanitize":false,"Secrets":[{"Format":"FOO_{{ key }}","NoPrefix":true,"Path":"_vault/non-existing"}],"Syslog":{"Enabled":false,"Facility":"LOCAL0"},"Upcase":true,"Vault":{"Address":"https://vault:8200","Enabled":true,"Grace":300000000000,"RenewToken":true,"Retry":{"Attempts":1,"Backoff":250000000,"MaxBackoff":60000000000,"Enabled":true},"SSL":{"CaCert":"","CaPath":"","Cert":"","Enabled":true,"Key":"","ServerName":"","Verify":false},"Transport":{"DialKeepAlive":30000000000,"DialTimeout":30000000000,"DisableKeepAlives":false,"IdleConnTimeout":90000000000,"MaxIdleConns":100,"MaxIdleConnsPerHost":5,"TLSHandshakeTimeout":10000000000},"UnwrapToken":false},"Wait":{"Enabled":false,"Min":0,"Max":0}}
2018/03/22 09:52:16.592048 [WARN] (clients) disabling vault SSL verification
2018/03/22 09:52:16.592072 [INFO] (runner) creating watcher
2018/03/22 09:52:16.592092 [DEBUG] (watcher) adding vault.token
2018/03/22 09:52:16.592111 looking at vault _vault/non-existing
2018/03/22 09:52:16.592607 [INFO] (runner) starting
2018/03/22 09:52:16.592819 [DEBUG] (watcher) adding vault.read(_vault/non-existing)
2018/03/22 09:52:17.034745 [WARN] (view) vault.read(_vault/non-existing): vault.read(_vault/non-existing): Error making API request.

URL: GET https://vault:8200/v1/_vault/non-existing
Code: 403. Errors:

* permission denied (retry attempt 1 after "250ms")
2018/03/22 09:52:17.387832 [ERR] (view) vault.read(_vault/non-existing): vault.read(_vault/non-existing): Error making API request.

URL: GET https://vault:8200/v1/_vault/non-existing
Code: 403. Errors:

* permission denied (exceeded maximum retries)
2018/03/22 09:52:17.387918 [ERR] (runner) watcher reported error: vault.read(_vault/non-existing): vault.read(_vault/non-existing): Error making API request.

URL: GET https://vault:8200/v1/_vault/non-existing
Code: 403. Errors:

* permission denied
2018/03/22 09:52:17.387948 [INFO] (runner) running
2018/03/22 09:52:17.388013 [INFO] (runner) missing data for vault.read(_vault/non-existing)