path "secret/data/kv1" {
  capabilities = ["read"]
}