unified matchers ExactlyAllowResources and ExactlyAlltowAttributes to ExactlyAllowAttributes