hmm, thanks for the suggestions but Im not really looking for a workaround, I am looking for a way to config the agent to block the behavior. The answer may be that the option doesnt exist to disable wildcards (which seems like asking for trouble to me, and anybody whos been an admin for more than 1 week), I may have to write a plugin to handle/reject wildcards