path "kv/data/service/terraform/nomad" { capabilities = ["read"] }