Support unix-style wildcards in trusted repos list

We compare the hostname + path to see if a url is trusted.