[Issue 9634] ACL processing of <what> clauses should evaluate regex pattern after other variants