must be called in vcl_init, all .add()s before .compile(), .compile()
exactly once, and .match() fails if .compile() was not called