resource "consul_acl_policy" "server_policy" { name = "consul-servers" rules = <