Placement of services with `/.well-known` path

Services like Let's Encrypt use /.well-know path to send "special" requests. Services with such a path are now placed at the top of the list of ACLs.