[dkasper]

Yeah, there are some edge cases where a wildcard is less secure. https://security.stackexchange.com/questions/8210/what-vulne...

[artursapek]

It's not even about edge cases - it's just good security practice to isolate credentials as much as possible and limit their scope.