title: Vault secrets list permission denied
body: <p>I can't understand how <code>secrets list</code> works.
  I have policy with path permission.</p>
  
  <pre><code>path "sys/mounts/*" {
  capabilities = ["create", "read", "update", "delete", "list","sudo"]
  }
  </code></pre>
  
  <p>I can run enable and disable flags</p>
  
  <pre><code>$ vault secrets enable -path=Test kv
  Success! Enabled the kv secrets engine at: Test/
  $ vault secrets disable Test
  Success! Disabled the secrets engine (if it existed) at: Test/
  </code></pre>
  
  <p>But I can't run list or move</p>
  
  <pre><code>vault secrets list
  Error listing secrets engines: Error making API request.
  
  URL: GET http://localhost:8200/v1/sys/mounts
  Code: 403. Errors:
  
  * permission denied
  
  vault secrets move Test Test2
  Error moving secrets engine Test/ to Test2/: Error making API request.
  
  URL: POST http://localhost/v1/sys/remount
  Code: 403. Errors:
  
  * permission denied
  </code></pre>
  
  <p>Its not a file system permission issue, after change admin-token to root-token everything work fine. So anyone can explain me this behavior ? </p>