Consuming Azure DevOps Library/Key Vault

Does anyone know a good way to consume linked Key Vault values in powershell build or release steps? Normal values can be grabbed with gci $env in the environment variables but I'm stumped on consuming secure values.

Steps:
1. Link Key Vault to DevOps library
2. ???
3. Profit