title: Multiple security-constraints: last one excluding preceding url-patterns
body: <p>I need to define security-constraints for three different sections of my webapplication. One for <code>/admin/*</code>, one for <code>/account/*</code> and a tricky one. This last one should match everything except the preceding url-patterns (<code>/*</code> excluding <code>/admin/*</code> and <code>/account/*</code>). How do I create this constraint?</p>
  
  <pre><code>  &lt;security-constraint&gt;
      &lt;web-resource-collection&gt;
          &lt;web-resource-name&gt;AdminPanel&lt;/web-resource-name&gt;
          &lt;url-pattern&gt;/admin/*&lt;/url-pattern&gt;
      &lt;/web-resource-collection&gt;      
      &lt;auth-constraint&gt;
          &lt;role-name&gt;admin&lt;/role-name&gt;
      &lt;/auth-constraint&gt;
      &lt;user-data-constraint&gt;      
          &lt;transport-guarantee&gt;CONFIDENTIAL&lt;/transport-guarantee&gt;
          &lt;/user-data-constraint&gt;
    &lt;/security-constraint&gt;
  
    &lt;security-constraint&gt;
      &lt;web-resource-collection&gt;
          &lt;web-resource-name&gt;AccountPanel&lt;/web-resource-name&gt;
          &lt;url-pattern&gt;/account/*&lt;/url-pattern&gt;
      &lt;/web-resource-collection&gt;      
      &lt;auth-constraint&gt;
          &lt;role-name&gt;account&lt;/role-name&gt;
      &lt;/auth-constraint&gt;
      &lt;user-data-constraint&gt;      
          &lt;transport-guarantee&gt;CONFIDENTIAL&lt;/transport-guarantee&gt;
          &lt;/user-data-constraint&gt;
    &lt;/security-constraint&gt;
  
    &lt;security-constraint&gt;
      &lt;web-resource-collection&gt;
          &lt;web-resource-name&gt;HTTPSOnly&lt;/web-resource-name&gt;
          &lt;url-pattern&gt;`/* excluding /admin/*, /account/*`&lt;/url-pattern&gt;
      &lt;/web-resource-collection&gt;      
      &lt;auth-constraint&gt;
          &lt;role-name&gt;visitor&lt;/role-name&gt;
      &lt;/auth-constraint&gt;
      &lt;user-data-constraint&gt;      
          &lt;transport-guarantee&gt;CONFIDENTIAL&lt;/transport-guarantee&gt;
          &lt;/user-data-constraint&gt;
    &lt;/security-constraint&gt;
  </code></pre>