When a program using vault-env is invoked from the command line, there is unlikely to be a VAULT_TOKEN environment variable, but there will probably be a ~/.vault-token file created by vault auth. It would be good to trying using this is VAULT_TOKEN is not present.