pub const WILDCARD: &str = "*";
The wildcard capability: a token holding it passes every capability check.