/kubernetes/config/certs/policy/
../
policy-keystore