# Dedicated renewable service password read and JWT-only publish.
path "platform/data/workloads/net-kingdom/keycape-factor-issuer" {
  capabilities = ["read"]
}
path "platform/data/workloads/net-kingdom/keycape-factor-read" {
  capabilities = ["read", "create", "update"]
}

path "auth/token/revoke-self" {
  capabilities = ["update"]
}