test core api without the session agent.

[bsutton]

We need to ensure that users of the core api can do so without accidentally starting an session agent.

Where is the boundary here. I think the session agent is really about the cli tooling and the core api should only about creating/maintaining vaults.