# backup — materialized from live OpenBAO (policy-as-code).
path "sys/storage/raft/snapshot" { capabilities = ["read"] }