How operational log rotation works in Vault