Wildcard domains should be limited to that users subdomain.

[sylv]

Files uploaded to sylv.example.com should not be available on other-user.example.com and vice versa.