# Allow decryption with the au-syd1-k8s-vso key
---
rules:
  - path: "transit/decrypt/au-syd1-k8s-vso"
    capabilities:
      - create
      - update

auth: {}
# Add specific roles here when needed