diff --git a/policies/auth/token/auth_token_self.hcl b/policies/auth/token/auth_token_self.hcl
index 55a1157..4e80d4c 100644
--- a/policies/auth/token/auth_token_self.hcl
+++ b/policies/auth/token/auth_token_self.hcl
@@ -5,10 +5,10 @@ path "auth/token/lookup-self" {
 
 # Allow tokens to renew themselves
 path "auth/token/renew-self" {
-    capabilities = ["update"]
+  capabilities = ["update"]
 }
 
 # Allow tokens to revoke themselves
 path "auth/token/revoke-self" {
-    capabilities = ["update"]
+  capabilities = ["update"]
 }
diff --git a/policies/kv/service/glauth/services/svc_vault_read.hcl b/policies/kv/service/glauth/services/svc_vault_read.hcl
index 93300b6..e34e98d 100644
--- a/policies/kv/service/glauth/services/svc_vault_read.hcl
+++ b/policies/kv/service/glauth/services/svc_vault_read.hcl
@@ -1,3 +1,3 @@
 path "kv/data/service/glauth/services/svc_vault" {
-    capabilities = ["list", "read"]
+  capabilities = ["list", "read"]
 }
diff --git a/policies/kv/service/packer/packer_builder.hcl b/policies/kv/service/packer/packer_builder.hcl
index 3f33ab3..f36d0d3 100644
--- a/policies/kv/service/packer/packer_builder.hcl
+++ b/policies/kv/service/packer/packer_builder.hcl
@@ -1,6 +1,6 @@
 path "kv/data/service/packer/builder/env" {
-    capabilities = ["read"]
+  capabilities = ["read"]
 }
 path "kv/data/service/packer/builder/docker-incus-client" {
-    capabilities = ["read"]
+  capabilities = ["read"]
 }
diff --git a/policies/kv/service/puppet/certificates/terraform_puppet_cert.hcl b/policies/kv/service/puppet/certificates/terraform_puppet_cert.hcl
index 6a31417..736758f 100644
--- a/policies/kv/service/puppet/certificates/terraform_puppet_cert.hcl
+++ b/policies/kv/service/puppet/certificates/terraform_puppet_cert.hcl
@@ -1,6 +1,6 @@
 path "kv/data/service/puppet/certificates/terraform" {
-    capabilities = ["read"]
+  capabilities = ["read"]
 }
 path "kv/data/service/puppet/certificates/ca" {
-    capabilities = ["read"]
+  capabilities = ["read"]
 }
diff --git a/policies/kv/service/puppetapi/puppetapi_read_tokens.hcl b/policies/kv/service/puppetapi/puppetapi_read_tokens.hcl
index d979cab..465a81e 100644
--- a/policies/kv/service/puppetapi/puppetapi_read_tokens.hcl
+++ b/policies/kv/service/puppetapi/puppetapi_read_tokens.hcl
@@ -1,3 +1,3 @@
 path "kv/data/service/puppetapi/tokens" {
-    capabilities = ["read"]
+  capabilities = ["read"]
 }
diff --git a/policies/kv/service/terraform/incus.hcl b/policies/kv/service/terraform/incus.hcl
index 7173116..4708a89 100644
--- a/policies/kv/service/terraform/incus.hcl
+++ b/policies/kv/service/terraform/incus.hcl
@@ -1,3 +1,3 @@
 path "kv/data/service/terraform/incus" {
-    capabilities = ["read"]
+  capabilities = ["read"]
 }
diff --git a/policies/kv/service/terraform/nomad.hcl b/policies/kv/service/terraform/nomad.hcl
index e9b4219..c3118ba 100644
--- a/policies/kv/service/terraform/nomad.hcl
+++ b/policies/kv/service/terraform/nomad.hcl
@@ -1,3 +1,3 @@
 path "kv/data/service/terraform/nomad" {
-    capabilities = ["read"]
+  capabilities = ["read"]
 }
diff --git a/policies/ssh-host-signer/sshsign-host-policy.hcl b/policies/ssh-host-signer/sshsign-host-policy.hcl
index 5127e62..7709b99 100644
--- a/policies/ssh-host-signer/sshsign-host-policy.hcl
+++ b/policies/ssh-host-signer/sshsign-host-policy.hcl
@@ -1,3 +1,3 @@
 path "ssh-host-signer/sign/hostrole" {
-    capabilities = ["create", "update"]
+  capabilities = ["create", "update"]
 }
diff --git a/policies/ssh-host-signer/sshsigner.hcl b/policies/ssh-host-signer/sshsigner.hcl
index 5127e62..7709b99 100644
--- a/policies/ssh-host-signer/sshsigner.hcl
+++ b/policies/ssh-host-signer/sshsigner.hcl
@@ -1,3 +1,3 @@
 path "ssh-host-signer/sign/hostrole" {
-    capabilities = ["create", "update"]
+  capabilities = ["create", "update"]
 }
diff --git a/policies/sshca/sshca_signhost.hcl b/policies/sshca/sshca_signhost.hcl
index 58b104b..436eea1 100644
--- a/policies/sshca/sshca_signhost.hcl
+++ b/policies/sshca/sshca_signhost.hcl
@@ -1,3 +1,3 @@
 path "sshca/sign/host" {
-    capabilities = ["create", "update"]
+  capabilities = ["create", "update"]
 }