ConfigSource checks by Value regex quirks?

There are quirks, but they are hardly known (much less documented). I mostly revert to sending that kind of thing to LM Logs and alerting there based on the log content, which is defined by the script that runs doing the detecting.