constraints: Use a more specific FQDN/email name constraint matching