path "pki_int/roles/*" {
  capabilities = ["create", "update", "read", "delete", "list"]
}