path "spindle/data/*" {
  capabilities = ["create", "read", "update", "delete"]
}

path "spindle/metadata/*" {
  capabilities = ["list", "read", "delete", "update"]
}

path "spindle/" {
  capabilities = ["list"]
}

path "auth/token/lookup-self" {
  capabilities = ["read"]
}