diff --git a/Documents/bin/smile-exec b/Documents/bin/smile-exec
index 2c293a69ca83b38e1aa14da70fc016e5c446a7b1..3abe0209a11fbcbf413ea681ae58019fdb134993 100755
--- a/Documents/bin/smile-exec
+++ b/Documents/bin/smile-exec
@@ -74,6 +74,9 @@ export KUBECONFIG="$HOME/.smile/kube/$SMILE_ENV/config"
 export TILLER_NAMESPACE="applications-tiller"
 # shellcheck disable=SC2155
 export VAULT_ADDR="$(vault_addr "$SMILE_ENV")"
-export VAULT_CAPATH="$HOME/Documents/Smile/keybase/team/smile_devs/ca_certs"
+VAULT_CAPATH="$(bundle show smile-cli)/lib/vault_ca"
+export VAULT_CAPATH
 
+aws-vault exec "smile-$SMILE_ENV-admin" -- \
+        vault login -method aws -no-print role=smile-ops
 eval exec aws-vault exec "smile-$SMILE_ENV-admin" -- "$@"
diff --git a/Repositories/Smile/.envrc b/Repositories/Smile/.envrc
index b666264878c6ad9be7314151828384b021e4a6d9..b61bdd27f94d4f194049f259bbe24271422accc5 100644
--- a/Repositories/Smile/.envrc
+++ b/Repositories/Smile/.envrc
@@ -1,17 +1,18 @@
 source_up
 export AWS_CONFIG_FILE="$HOME/.smile/aws/config"
-export AWS_PROFILE=smile-dev-admin
+export AWS_PROFILE=smile-security
 export AWS_DEFAULT_PROFILE="$AWS_PROFILE"
 export AWS_DEFAULT_REGION=us-east-1
 export GEM_HOME="$HOME/Repositories/Smile/.gem"
 export GIT_AUTHOR_EMAIL='nimrod@smile.io'
 export GIT_AUTHOR_NAME='Nimrod Adar'
-export HELM_HOME="$HOME/.smile/helm/dev-sre"
+#export HELM_HOME="$HOME/.smile/helm/dev-sre"
 export HELM_TLS_ENABLE="true"
 export HELM_TLS_VERIFY="true"
-export KUBECONFIG="$HOME/.smile/kube/dev/config"
+#export KUBECONFIG="$HOME/.smile/kube/dev/config"
 export PATH="$GEM_HOME/bin:$PATH"
 export TILLER_NAMESPACE="applications-tiller"
 export VAULT_ADDR="https://vault.smile.aws"
-export VAULT_CAPATH="/Volumes/Keybase/team/smile_devs/ca_certs"
 bundle install --quiet
+VAULT_CAPATH="$(bundle show smile-cli)/lib/vault_ca"
+export VAULT_CAPATH