resource "garage_key" "key" { name = var.name permissions = { create_bucket = false } }