small fixes
forbid guest key pattern with / or double @ in it