started with db.password = password-v1
-> vault kv put secret/secrets-demo db.password=password-v2
environment, no refresh:          db.password = password-v1
DbProperties bean, no refresh:    password-v1
@RefreshScope bean, no refresh:   password-v1
ContextRefresher.refresh() changed keys: [db.password]
environment, after refresh:       db.password = password-v2
DbProperties record bean, after refresh:     password-v1
@RefreshScope bean, after refresh:           password-v2
old version is still in Vault: vault kv get -version=1 -> password-v1