unifi/vault/policies/unifi.hcl

path "[[ .vault.prefix ]]kv/data/service/[[ .unifi.instance ]]" {
  capabilities = ["read"]
}