path "kv/data/acme" {
  capabilities = ["read"]
}
path "kv/data/namecheap" {
  capabilities = ["read"]
}
path "kv/data/aws" {
  capabilities = ["read"]
}
path "pki_int/sign/masked-dot-name" {
  capabilities = [ "create", "read", "list", "update" ]
}