diff --git a/test/test.hs b/test/test.hs
--- a/test/test.hs
+++ b/test/test.hs
@@ -163,6 +163,22 @@
         , VaultSecretPath "secret/foo/quack/duck"
         ]
 
+    vaultAuthEnable conn "approle"
+
+    vaultWrite conn (VaultSecretPath "secret/small") (object ["X" .= 'x'])
+
+    vaultPolicyCreate conn "foo" "path \"secret/small\" { capabilities = [\"read\"] }"
+    vaultAppRoleCreate conn "foo-role" defaultVaultAppRoleParameters{_VaultAppRoleParameters_Policies=["foo"]}
+
+    roleId <- vaultAppRoleRoleIdRead conn "foo-role"
+    secretId <- _VaultAppRoleSecretIdGenerateResponse_SecretId <$> vaultAppRoleSecretIdGenerate conn "foo-role" ""
+
+    arConn <- connectToVaultAppRole addr roleId secretId
+    (_, ar1) <- vaultRead conn (VaultSecretPath "secret/small")
+    case ar1 of
+      Left (v, _) -> v @?= object ["X" .= 'x']
+      Right (x :: FunStuff) -> assertFailure $ "Somehow parsed an impossible value" ++ show x
+
     vaultSeal conn
 
     status5 <- vaultSealStatus addr
diff --git a/vault-tool-server.cabal b/vault-tool-server.cabal
--- a/vault-tool-server.cabal
+++ b/vault-tool-server.cabal
@@ -1,5 +1,5 @@
 name:                vault-tool-server
-version:             0.0.0.3
+version:             0.0.0.4
 synopsis:            Utility library for spawning a HashiCorp Vault process
 description:         Utility library for spawning a HashiCorp Vault process
 license:             MIT
@@ -22,7 +22,7 @@
   exposed-modules:     Network.VaultTool.VaultServerProcess
 
   build-depends:       base >=4.8 && <4.11,
-                       vault-tool,
+                       vault-tool >=0.0.0.4,
                        aeson,
                        async,
                        bytestring,
@@ -42,7 +42,7 @@
   main-is:             test.hs
 
   build-depends:       base >=4.8 && <4.11,
-                       vault-tool,
+                       vault-tool >=0.0.0.4,
                        vault-tool-server,
                        aeson,
                        tasty-hunit,