diff --git a/acl/policy.go b/acl/policy.go
index ecc11e1daf..014ef51ac8 100644
--- a/acl/policy.go
+++ b/acl/policy.go
@@ -15,7 +15,7 @@ const (
 // an ACL configuration.
 type Policy struct {
 	ID   string       `hcl:"-"`
-	Keys []*KeyPolicy `hcl:"key"`
+	Keys []*KeyPolicy `hcl:"key,expand"`
 }
 
 // KeyPolicy represents a policy for a key