path "@@POLICY_PATH@@" {
  capabilities = ["read"]
}