Review a microservices architecture where services communicate over gRPC. Identify potential security vulnerabilities regarding service-to-service authentication. Propose a solution implementing mTLS with SPIFFE/SPIRE identities. Explain how you would manage certificate rotation, secret injection using a vault service, and network policies to prevent lateral movement in the event of a breach.