diff --git a/cmd/root.go b/cmd/root.go
index 8a18b5d..7ba8282 100644
--- a/cmd/root.go
+++ b/cmd/root.go
@@ -84,7 +84,7 @@ func init() {
 	viper.BindEnv("vault-token", "VAULT_TOKEN")
 
 	if tok := vaultTokenFromDisk(); tok != "" {
-		viper.Set("vault-token", tok)
+		viper.SetDefault("vault-token", tok)
 	}
 }