kafka-acls --add --allow-principal User:schemaregistry \
           --consumer --topic _schemas \
           --consumer-group schema-registry-kafka-schema-registry-1.kafka-schema-registry.example.com-443