That always sets MA_FIND_PDMS and therefore always matches the subdomain. Corrected patch follows.
I have tested the new patch, and that works for my use case as well.In both cases, the recipient using a subdomain of the access map was blocked.
Best regards Henrik Larsson
