Vault policy write only + read parameters too

So, there is already a question about this, now I saw: