auth: mds cap parsing should not depend on order
3 - minor
Pull request ID:
path= has to come before uid= mds “allow r, allow rw path=/user uid=100026, allow rw path=/project"
This will confuse people and cause security issues until the end of time.