If there are multiple matches for a given VSL tag (such as "Hit"
matching both Hit and HitPass), prefer the one that is an exact match.

Fixes #1288