terraform-vault/policies/ssh-host-signer/sshsign-host-policy.hcl

path "ssh-host-signer/sign/hostrole" {
  capabilities = ["create", "update"]
}