Rather than having this kind of seemingly-exclusive options, can we go for something like:

```
match_strings: ['ssh', 'sshd']
exact_match: true # by default
```

Or am I misunderstanding the intent?