[Issue 9634] New: ACL processing of <what> clauses should evaluate regex pattern after other variants