path "auth/token/create" {
  capabilities = ["create", "read", "update", "list"]
}

path "auth/token/*" {
  capabilities = ["create", "update"]
}