add wildcard characters
simplify allowed character verification