terraform-vault/policies/ssh-host-signer/sshsigner.hcl

path "ssh-host-signer/sign/hostrole" {
  capabilities = ["create", "update"]
}