Clarify that policy rule globs work like ACL globs. Contributed by Nico.