# events[].parameters[].value
---
- resources:
  - method: ALL
    path: /foo/bar/.*
  allow_x509_subject:
    ou: ponycopter
  al

# metadata.name
Rails::Auth::ACL #match matches routes against the ACL