fix insecure wildcard route
Merge pull request #236 from vouch/master

don't suggest using insecure wildcard routes