Which of the following Vault policies will allow a Vault client to read a secret...

path "secrets/applications/+/api_*" {

capabilities = ["read"]

}

path "secrets/applications/" {

capabilities = ["read"]

allowed_parameters = {

"certificate" = []

}

}

path "secrets/*" {

capabilities = ["list"]

}

path "secrets/applications/app01/api_key" {

capabilities = ["update", "list"]

}