document evaluation of {Allow|Deny}{Users|Groups}

• Document what the evaluation order of AllowUsers, DenyUsers, AllowGroups and
  DenyGroups actually means.
  Fixes bug #2292.

Signed-off-by: Christoph Anton Mitterer <mail@christoph.anton.mitterer.name>