path "database/creds/db-backup" { capabilities = ["read"] }