# events[].sql_query.sql
SELECT * FROM "roles" WHERE "role_id" = 'cucumber:user:bob'

# events[].sql_query.sql
SELECT * FROM "resources" WHERE "resource_id" = 'cucumber:variable:probe'

# events[].sql_query.sql
SELECT * FROM "secrets" WHERE ("secrets"."resource_id" = 'cucumber:variable:probe') ORDER BY "version" DESC LIMIT 1

# events[].sql_query.sql
SELECT "value" FROM "annotations" WHERE (("annotations"."resource_id" = 'cucumber:variable:probe') AND ("name" = 'conjur/mime_type')) LIMIT 1

# metadata.name
A foreign role can be granted permission to fetch a secret.

# metadata.feature
RBAC privileges control whether a role can update and/or fetch a secret.