unprivileged_secrets:
  cluster:
    - monitor
  indices:
    - names: [
      ".fleet-secrets*",
    ]
      privileges: [ "write", "read" ]