Documented order in which access rules are applied to kernel.

commit f82cadf3b7a9d84ae0bf2aa06fb8ecff9b4332dc mainline