Not understanding Vault policies for secret paths

[Wolfsrudel]

For the ui you will need list on metadata

path "kv/metadata/devops/*" {
  capabilities = ["list"]
}