# Allow listing and reading tokens
path "auth/token/lookup" {
  capabilities = ["read", "list"]
}