path "kubernetes/au/syd1/creds/cluster-root" { capabilities = ["update"] }