might be well worth ordering regexes closer to similar ones, e.g. straight passw authentication issues up there with older ones on top.
And we need sample log lines for all of these.  Might be worth waiting just a bit (few hours) until failJson PR gets merged: https://github.com/fail2ban/fail2ban/pull/290