This read-create enumerated value, defaulting to exact, controls how vacmAccessContextPrefix is matched against a request's context name: exact(1) requires the context name to exactly equal the prefix, while prefix(2) selects any context whose starting octets match the prefix, allowing simple wildcarding. Admins set this to prefix(2) when they want one access control entry to cover a whole family of related contexts rather than a single exact context name. For example, setting it to prefix(2) with a prefix of vlan lets the entry match contexts named vlan10, vlan20, and any other context starting with vlan.