path "kv/*" {
  capabilities = ["list", "read"]
}