path "secret/data/ovh-cert-manager" { capabilities = ["read"] }