path "pki_int/issue/*" {
  capabilities = ["create", "update", "read"]
}
path "pki_int/renew/*" {
  capabilities = ["update"]
}
path "pki_int/cert/*" {
  capabilities = ["read"]
}