Support token domain wildcards to allow access from multiple domains

[ahonn]

Some partners have reported wanting to use the same Token for requests from different domain names.
We need to consider whether you need to support configuring token domains through wildcards to support access from multiple domains or subdomains.