path "kv/data/service/puppetapi/tokens" {
    capabilities = ["read"]
}