Expand to files only

Currently a wildcard matches directories too, which fails later when trying to calculate a hash.