path "platform/data/workloads/reuse/reuse-surface/runtime-secrets" { capabilities = ["read"] } path "auth/token/lookup-self" { capabilities = ["read"] } path "auth/token/revoke-self" { capabilities = ["update"] }