Difference between /users/* and /users/**

What is the difference between the below two lines? In what way do they affect the access security?

- <intercept-url pattern="/users/*" access="ROLE_admin" />
+ <intercept-url pattern="/users/**" access="ROLE_admin" />