[[- $c := merge .kafka.broker .kafka . ]] path "[[ $c.vault.pki.path ]]/issue/[[ .instance ]]-broker" { capabilities = ["update"] }