Allow * as a wildcard in trusted_domains