{
  "schema": "secrets-engine.public-recovery-selector.v1",
  "status": "source_correspondence_only_not_native_assent",
  "issuer": "https://kc.coulomb.social",
  "consumer": {
    "client_id": "secrets-engine-openbao",
    "secret_env": "KEYCAPE_SECRETS_ENGINE_OPENBAO_CLIENT_SECRET",
    "audience": "secrets-engine-openbao",
    "scope": "openbao:login",
    "subject": "service:secrets-engine",
    "tenant": "tenant:platform",
    "roles": "secrets-engine",
    "deny_scope": "openbao:admin"
  }
}