Add authentication policy which only allows usernames that match a regular expression