Ceph » rgw

Openstack swift allows -r acls to contain referral acls, which can be things like : .r:host.example.com .r:*.example.com .r:-host.host.example.com .r:*

In Ceph/radosgw, we only support .r:*. That's probably the most useful of the lot. We could implement the other forms if there's reason to do so.

We should at least fix the bug that in hammer, .r:*.domain gets interpreted as .r:* (the .domain part presumably gets treated as a separate grant and since it's not a valid user, then gets "silently ignored".)