Document required policy for doing import/export

[cthtrifork]

I would like the TOKEN to have the least-permissive setup but I can not find documentation of a token_policies that would work with medusa.

# List, create, update, and delete key/value secrets
path "secret/*" {
    capabilities = ["create", "read", "update", "delete", "list"]
}

Would this path be enough?

[cthtrifork]

Ideally I would like documentation for creating an approle with a token policy that can only call relevant APIs