Looks like this works for groups because of the %, but a username will need to match a-z in that first character set (so we can't support uppercase first characters of a username).  Seems that adding A-Z in here too creates an ambiguity with aliases?