# Allow encryption with the au-syd1-k8s-vso key path "transit/encrypt/au-syd1-k8s-vso" { capabilities = ["create", "update"] }