`(/.*)?` is usually used in SELinux fcontexts as it matches either the dir with that name or files beneath it, but not files prefixed with the same name (e.g. /usr/share/foreman/config/hooks_foo).