Vault expression apply to attributes, while addressability permissions apply to resources. So the notions are unrelated and the access control configuration API should not conflate them.