# Allow renewing tokens
path "auth/token/renew" {
  capabilities = ["update"]
}