Safer regex for domain users