the `| user:*` indicates that a wildcard is allowe...