remove paragraph about wildcards, irrelevant since auth 3.0