supports basic list e.g. "localhost,localhost,localhost" or complex JSON string -- see tests