wafsamba/samba_abi: allow negative matches in abi_match