I'd also say here that if *any* of the strings match, the user will be allowed through