pattern "badbranch"
deny "*"
