How to use vault to encrypt keys used with ec2 dynamic inventory?

So when using the AWS modules I can use the ‘aws_access_key’ and the ‘aws_secret_key’ variables to define the keys used in a encrypted variable file. But from what I can tell the ec2 dynamic inventory can only read keys from environment variables or boto.cfg files.

Has anyone dealt with this before? Are there any workarounds to this?