- op: replace
  path: "/data/SECRETS_SYSTEM"
  value: QWxzb05vdFZlcnlTZWNyZXQK # AlsoNotVerySecret encoded as base64