path "secret/data/crawl4ai" { capabilities = ["read"] }