# Allow decryption with the au-syd1-k8s-vso key
path "transit/decrypt/au-syd1-k8s-vso" {
  capabilities = ["create", "update"]
}