To give a role the ability to display or output all of the end points under the /secrets/apps/* end point it would need to have which capability set?