This should probably also check `!host.startsWith("*.")`, to avoid accidentally generating patterns like `*.*.apache.org`