use of the right=%<fqdn> wildcard