infra/vault/policies/ansible.hcl

path "kv/*" {
  capabilities = ["list", "read"]
}