Allow excluding specific paths from broader matches (e.g. owa Outlook lookups)

Problem/Motivation

A typical rule is:
/.*\.asp/
sadly Outlook calls
/owa/auth/logon.aspx
automatically for OWA Logons, which may lead to unwanted bans.

This can be mitigated best by IP whitelisting, but if the client has no static IP, it can't be used.
So it might make sense to also whitelist certain routes, which would match broader otherwise.

(But I think it's an edge-case). So adding this for the records, if anyone needs it or would like to work at this.

Steps to reproduce

Proposed resolution

Remaining tasks

User interface changes

API changes

Data model changes