So to check I’ve understood, you’re saying
access=yes
is followed by an implicit “stop processing other rules”?