The Ceph documentation states that clients should use "allow r" mon caps[1][2][3], which will grant full read access to all config-keys stored in the monitor -- including the LUKS encryption keys for OSD. https://nvd.nist.gov/vuln/detail/CVE-2018-14662
