path "secret/data/cameras" { capabilities = ["read"] }