Prior to this change, EMQX default ACL has a deny rule to reject subscribing to `#`. For completeness, the default ACL should also deny `+/#` because they are essentially equivalent.
zmstone