key "" {
policy = "read"
}
key "foo/" {
policy = "write"
key "foo/bar/" {
key "foo/bar/baz" {
policy = "deny"