support suffix matching (from RFC 6839)

closes #6