rep:glob pattern that allows user to see the node and all properties, but not child nodes I've been struggling getting ACLs built on a JCR structure for a while now. The requirement seems super simple, but I can't seem to find the solution.Let's say I have the following node structure:car-types (Properties: jcr:primaryType, jcr:mixinType)bmw (Properties: jcr:primaryType, jcr:mixinType, jcr:uuid, brandHeadquarters, marketShare)car-instancesbmw-320i (Properties: jcr:primaryType, jcr:mixinType, jcr:uuid, price, fuelEfficiency, colour)bmw-m3 (Properties: jcr:primaryType, jcr:mixinType, jcr:uuid, price, fuelEfficiency, colour)mbw-530i (Properties: jcr:primaryType, jcr:mixinType, jcr:uuid, price, fuelEfficiency, colour)audi (Properties: jcr:primaryType, jcr:mixinType, jcr:uuid, brandHeadquarters, marketShare)car-instancesetc.mercedes (Properties: jcr:primaryType, jcr:mixinType, jcr:uuid, brandHeadquarters, marketShare)car-instancesetc.If want to give a specific principal access to the bmw node and ONE OF the instances underneath bmw (for example, bmw-320i), so that I can referenc