# cert-renew — materialized from live OpenBAO (policy-as-code). path "pki_int/issue/famfi-home" { capabilities = ["update"] }