I have configured an Agent role to have "build" permissions only for "(?i)node1.*" 

The permissions have no effect and when running a job I can still build on other nodes. 

I have tried a variety of patterns with no success, this seems like a cut and dry test so I do not know what is going wrong.