add AuthZ unit test for regexp on resources, then code to make it work.