Other users can log in using that same client application, but they can’t edit the vault, or profit from it? Only the person who set it up can do that?
How does a vault appear to a non-logged in user? Does the client application just look like a massive app? Presumably someone with admin on the machine could delete the whole app and vault?
I have the reverse problem, that is lots of disk space but not a lot of bandwidth. So I’d be worried less about drive space being used up, although I’d still want to keep a bit of leash on that anyway, and more about bandwidth limitations. Can those also be set within the config file?