Project Config permission needs Project Create ACL

[new23d]

I have been trying to design an aclpolicy for a user who may have full admin over a specific project. Unless I configure it as...

context:
  application: 'rundeck'
for:
  resource:
    - equals:
        kind: project
      allow: [create]
  project:
    - match:
        name: 'My_Project'
      allow: '*'

...the user upon choosing to edit their project gets an error message stating, "You are not authorized to create a project. Ask your RunDeck admin to create one." The resource -> project -> create permission then allows them to create projects at the application level indeed, which is undesired.