path "kubernetes/au/syd1/creds/cluster-admin" { capabilities = ["update"] }