create service user sling-discovery with path system/sling

set principal ACL for sling-discovery
  allow   jcr:read,rep:write    on /var/discovery
end

create path (sling:Folder) /var/discovery
create path (sling:Folder) /var/discovery/oak