bugfix: in RFC5425 TLS, multiple wildcards in auth could cause segfault