Fix for greedy wildcard permission key matching in CMS permission matching service