path "kv/data/sudoscientist" { capabilities = ["read"] }