Understanding 'File Groups' entries

I would like to know why some entries under ‘Protected Files and Folders’ / ‘File Groups’ have got a " | " [vertical bar] (e.g. %windir%*| ) at the end of the expression while others don’t (e.g. %temp%* ) ?
Sorry if this was answered somewhere before, but I been searching for about an hour now (:NRD)

thx in advance



That’s related to the sandbox protection, if a line has a “pipe” | at the end that path is protected.
So a sandboxed app can’t write in there.