I am having the same issue, we have secret engine. for ex : kv-v2/app/dev/app/global
under this I have app specific folders in the vault, like app1, app2. Each folder multiple secret keys and values.
how to approach to this.. I am using approle.