{
  "policy": "path \"secret/data/myapp/*\" { capabilities = [\"create\", \"read\", \"update\"] }"
}