Which of the following policies would permit a user to generate dynamic credentials on a...

path "database/creds/read_only_role" {

capabilities = ["read"]

}

path "database/creds/read_only_role" {

capabilities = ["generate"]

}

path "database/creds/read_only_role" {

capabilities = ["list"]

}

path "database/creds/read_only_role" {

capabilities = ["sudo"]

}