[Issue 8286] Add missing matching rule for cn=config attributes