disallow asterisk in api names