Deny Route not honored in COS when route match pattern or prefix starts with "#"

I have a COS that denies access to a specific route pattern.

If that route pattern starts with a # in the prefix field or in the match pattern field, denying that route doesn't work. If I remove the # symbol, denying works.