`kubectl get secret -n spicedb internal-ca -o json...
# spicedb
p
kubectl get secret -n spicedb internal-ca -o jsonpath="{.data.tls\.crt}" | base64 --decode > tls.crt