path "secret/data/woodpecker" {
    capabilities = ["read"]
}

path "secret/data/container-registry" {
    capabilities = ["read"]
}