secure insert tags via wildcard replacement