Wildcard certificates are not always a security risk