{
    "description": "For NV Read Write we have a special handling",
    "policy": [
        {
            "type": "or",
            "branches": [
                {
                    "name": "NVWrite",
                    "description": "For NV Write we need the secret of /nv/Owner/foo",
                    "policy": [
                        {
                            "type": "commandCode",
                            "code": "NV_WRITE"
                        },
                        {
                            "policyRef": [ 1, 2, 3, 4, 5 ],
                            "type": "secret",
			                "objectPath": "/nv/Owner/foo1",
		                },
                        {
                            "policyRef": [ 6, 7, 8, 9, 10 ],
                            "type": "secret",
			                "objectPath": "/nv/Owner/foo2",
		                }
                    ]
                },
                {
                    "name": "NVRead",
                    "description": "For NV Read we don't need any auth",
                    "policy": [
                        {
                            "type": "commandCode",
                            "code": "NV_READ"
                        }
                    ]
                }
            ]
        }
    ]
}
