Don't return violation if a match was seen

This corrects the problem described in #568 -- if a match of at least one element between `@pkg_parts` and `@path_parts` has been seen, don't return a policy violation.