Confusing plus and asterisk operators in vault policies for kv2

I have absolutely same question. It is quite discouraging to see that no one from community can answer such simply looking question. So bumping up the thread and hoping we will get an answer soon.