[[- $c := merge .kafka . ]] path "[[ $c.vault.pki.path ]]/issue/[[ .instance ]]-jikkou" { capabilities = ["update"] }