anchor.diff:  | allowUserIdProxy     | false   | This connection is allowed to send messages with a user_id property that differs from the connection's authenticated user id.
   | sources              | ""      | List of Source addresses allowed when creating receiving links. This list may be expressed as a CSV string or as a list of strings. An empty list denies all access.
   | targets              | ""      | List of Target addresses allowed when creating sending links. This list may be expressed as a CSV string or as a list of strings. An empty list denies all access.
  +| sourcePattern        | ""      | List of Source address patterns allowed when creating receiving links. This list must be expressed as a CSV string. An empty string denies all access. 
  +| targetPattern        | ""      | List of Target address patterns allowed when creating sending links. This list must be expressed as a CSV string. An empty string denies all access. 
   |====
   
   == Policy Wildcard and User Name Substitution
  
positive.code: ----
      sources: tmp_${user}, temp*, ${user}-home-*
  ----
  
  == Composing Policies
  
  
negative.code: The asterisk must stand alone and cannot be appended to a host name
  or to an IP address fragment.
  
  === AMQP Source and Target User Name Substitution
  
  The rule definitions for `sources`, `targets`, `sourcePattern`, and
  `targetPattern` may include the username
  substitution token
  
  [options="nowrap"]
  ----
      ${user}
  ----
  
  The username substitution token is replaced with the authenticated user name for
  the connection. Using this token, an administrator may allow access to
  