path "secret/data/projects/+/+" {
  capabilities = ["read"]
}

path "secret/metadata/projects/+/+" {
  capabilities = ["read", "list"]
}