terraform-vault/policies/kv/service/terraform/incus.hcl

path "kv/data/service/terraform/incus" {
    capabilities = ["read"]
}