Add ability to fetch vaults at the resource group level rather than the subscription level only

[cricketthomas]

Ok thank you - my fault the Reader role was time limited and had to be activated. Once activated, it was working as expected. I would prefer not have to give Reader level access to the subscription so looks like #107 will suit my needs going forward - thanks!

Originally posted by @murphm54 in #119