path "kubernetes/creds/flux-reconcile" {
    capabilities = ["update"]
}