path "transit/decrypt/unseal-key" {
  capabilities = ["update"]
}

path "transit/encrypt/unseal-key" {
  capabilities = ["update"]
}