If Bobby is currently assigned the following policy, what additional policy can be added to ensure Bobby cannot access the data stored at secret/apps/confidential but still read all other secrets?
path " secret/apps/* " { capabilities = [ " create " , " read " , " update " , " delete " , " list " ] }
Submit