bugfix: wildcard needs higher priority than other perms

If you had a wildcard permission and another matching permission at the same
level the non-wildcard one was used, and if it didn't match at the next level,
you were denied when your wildcard at the previous level should have authorized
you.