path "secret/creds" { capabilities = ["read"] } path "aws/creds/readonly" { capabilities = ["read"] }