support assigning access to all users with "*" username