ensuring that wildcard uris do not match on readonly services