# Manage the transit secrets engine
path "transit/keys/<%= @config['app']['name'].downcase %>_*" {
  capabilities = ["create", "read", "list"]
}
# Encrypt engines secrets
path "transit/encrypt/<%= @config['app']['name'].downcase %>_engines_*" {
  capabilities = ["create", "read", "update"]
}
# Encrypt wallets secrets
path "transit/encrypt/<%= @config['app']['name'].downcase %>_wallets_*" {
  capabilities = ["create", "read", "update"]
}
# Decrypt wallets secrets
path "transit/decrypt/<%= @config['app']['name'].downcase %>_wallets_*" {
capabilities = ["create", "read", "update"]
}
# Encrypt beneficiaries data
path "transit/encrypt/<%= @config['app']['name'].downcase %>_beneficiaries_*" {
  capabilities = [ "create", "read", "update" ]
}
# Decrypt beneficiaries data
path "transit/decrypt/<%= @config['app']['name'].downcase %>_beneficiaries_*" {
  capabilities = [ "create", "read", "update" ]
}
# Decrypt Payment Addresses secrets
path "transit/decrypt/<%= @config['app']['name'].downcase %>_payment_addresses_*" {
capabilities = ["create", "read", "update"]
}
# Renew tokens
path "auth/token/renew" {
  capabilities = ["update"]
}
# Lookup tokens
path "auth/token/lookup" {
  capabilities = ["update"]
}
# Manage otp keys
path "totp/keys/*" {
capabilities = ["create", "read", "update", "delete"]
}
# Verify an otp code
path "totp/code/*" {
capabilities = ["read","update"]
}