path "pki_int/*" {
  capabilities = ["list", "read"]
}

path "pki_root/*" {
  capabilities = ["list", "read"]
}

path "ssh-host-signer/*" {
  capabilities = ["list", "read"]
}

path "sshca/*" {
  capabilities = ["list", "read"]
}