Path prefix | Policy effect
----------- | --------------------
`data`      | Permissions apply to the **latest** version of the data.
`undelete`  | Clients can use un-delete commands and endpoints on any version of the data.
`destroy`   | Clients can use destroy commands and endpoints on any version of the data.
`metadata`  | Clients can use metadata commands and endpoints on any version of the data.