path "kv/data/hydra" { capabilities = ["read"] }