Have you considered to extend this to support git https credential stores? They could be served as credential store files via the http server just like the ssh keys. The ONVAULT command would then retrieve the file, configure git to use the credential store, execute the command, unconfigure git, remove the file.

If no, would you be willing to accept a pull request implementing this?