namespace "default" { policy = "write" }