$ tee test-policy.hcl << EOF path "secret/*" { capabilities = ["create", "read", "update", "delete", "list"] } EOF