Yeah that's correct. The permissions switch can only be on the client because that's where sharing the vault key with Infisical by encrypting it under one of i

Yeah that's correct. The permissions switch can only be on the client because that's where sharing the vault key with Infisical by encrypting it under one of its public keys occurs.