path "secret/teams/secret_entities/*" { capabilities = ["read", "list", "create", "delete", "update"] } path "secret/teams/secret_caching_platform/*" { capabilities = ["read", "list", "create", "delete", "update"] } path "sys/policy/secret_entities" { capabilities = ["read"] } path "sys/mounts/*" { capabilities = [ "create", "read", "update", "delete", "list" ] } path "pki*" { capabilities = [ "create", "read", "update", "delete", "list", "sudo" ] }