[
  {
    "name": "user-engine",
    "tokens": ["replace-with-write-token"],
    "sources": ["user-engine"],
    "tenants": ["*"],
    "may_write": true,
    "may_read": false,
    "secret_policy": "redact"
  },
  {
    "name": "operator",
    "tokens": ["replace-with-read-token"],
    "sources": ["user-engine"],
    "tenants": ["*"],
    "may_write": true,
    "may_read": true,
    "secret_policy": "redact"
  }
]