path "secret/fakebank" {
    capabilities = ["read"]
    allowed_parameters = {
        "api_key" = []
    }
}