path "secret/data/authentik/openwebui" {
    capabilities = ["read"]
}