The mount path of the Vault PKI secrets engine (default: pki).

Use a custom value if you have multiple PKI engines mounted at different paths, e.g. pki-intermediate or pki-root. Nested mounts such as teams/a/pki are supported; allowed characters are letters, digits, -, _ and . (no ./.. segments).

Vault policy example:

path "<mount>/issue/<role>" {
  capabilities = ["create", "update"]
}