path "secret/creds" {
  capabilities = ["read"]
}