Vault: "snapshot" cooker

---

Migrated from T887 (view on Phabricator)