public boolean matchesAtMostOne() {
        return findIndefiniteField() == null;
    }
Returns true if this filter could only match one ACE -- in other words, if
there are no ANY or UNKNOWN fields.
clients/src/main/java/org/apache/kafka/common/acl/AccessControlEntryFilter.java