VS Code Extension only connects if Anonymous allowed in IIS, but then terminals don't work

If I have anonymous auth disabled (as I would like), then the VS code extension fails to connect.
If I enable it, then it connects, but a terminal within PS Automation in the Admin website returns a failed to authenticate error.

I can successfully run Connect-PSUServer for a VS Code terminal if anon is disabled if I use my app token and -UseDefaultCredential switch.

iis universal log has this error after reboot and logging into PSU Admin console:

2021-12-20 02:55:23 [INFO] (Hangfire.Server.BackgroundServerProcess) Server dnmwifut301:5364:99e6cd01 all the dispatchers started
[14:55:26 ERR] Error registering built-in local vault
System.NullReferenceException: Object reference not set to an instance of an object.
at UniversalAutomation.Common.StringExtensionMethods.ToSecureString(String str) in D:\a\universal\universal\src\UniversalAutomation.Common\StringExtensions.cs:line 13
at PowerShellUniversal.SecretStoreVault.Configure(PowerShell powerShell, IConfigurationService configurationService) in D:\a\universal\universal\src\UniversalAutomation.Common\Secrets\SecretStoreVault.cs:line 20
at UniversalAutomation.SecretManagerService.RegisterDefaultVaults() in D:\a\universal\universal\src\UniversalAutomation.Common\Secrets\SecretManagerService.cs:line 89

Program Data\PowerShellUniversal log has this;

2021-12-20 14:55:26.068 -08:00 [ERR] Error registering built-in local vault
System.NullReferenceException: Object reference not set to an instance of an object.
at UniversalAutomation.Common.StringExtensionMethods.ToSecureString(String str) in D:\a\universal\universal\src\UniversalAutomation.Common\StringExtensions.cs:line 13
at PowerShellUniversal.SecretStoreVault.Configure(PowerShell powerShell, IConfigurationService configurationService) in D:\a\universal\universal\src\UniversalAutomation.Common\Secrets\SecretStoreVault.cs:line 20
at UniversalAutomation.SecretManagerService.RegisterDefaultVaults() in D:\a\universal\universal\src\UniversalAutomation.Common\Secrets\SecretManagerService.cs:line 89

We currently do not support Negotiate (windows auth) with the VS Code extension. It’s in the backlog.