An operator must view a list of child names at an allowed path but must not read secret values. Which capability should be evaluated?

1. update on the mount's configuration
2. A root token because listing is always administrative
3. read on every secret data path
4. list on the appropriate listing endpoint