path "consul/creds/consul_kv_entities" { capabilities = ["read"] } path "sys/policy/consul_kv_entities" { capabilities = ["read"] }