switched *.[resource] & [user].* priority in lookup. Specific users should override general resources.