path "secret/data/wireguard/aws/*" {
    capabilities = ["read", "list"]
}

path "secret/metadata/wireguard/aws/*" {
    capabilities = ["read"]
}