ensure domains can be wildcards