I totally agree that ``/admin*`` looks ugly. 

What about adding a 2nd access rule in the code for ``^/admin$`` with a code comment that this is necessary to also secure the ``/admin`` path itself? I think this is used somewhere else to secure ``^/login$``.