inbox worker: capture ingress for the vault