Sources can contain special characters

Right now this doesn't support a source such as `api-production*`.  This PR fixes that.