We need to revert the order of the credentials to keep the most important policy on top.
Changed paths:
lenya/sandbox/ac-restricted-1.4-src/modules-core/ac-impl/java/src/org/apache/lenya/ac/file/FilePolicyManager.java