net,example)/abc/path - {"access": "block"} com,example)/foo - {"access": "exclude"}