Add vault stanza to levant services

service.nomad

@@ -17,6 +17,7 @@
 # healthcheck = "/"
 # mysql = bool
 # redis = bool
+# vault = bool
 job "[[.name]]" {
   region = "global"
   datacenters = ["dc1"]
@@ -121,6 +122,15 @@ job "[[.name]]" {
         [[ end ]]
       }
 
+      [[ if default false .vault -]]
+      vault {
+        policies = [
+          "access-tables",
+          "nomad-task",
+        ]
+      }
+      [[ end -]]
+
       [[ with .env -]]
       env = {
         [[- range $k, $v := . ]]