# ssh-sign-user — materialized from live OpenBAO (policy-as-code).
path "ssh/sign/user" { capabilities = ["update"] }