Wildcard and regex support for whitelisting