How sni_hostname matches the extracted TLS ClientHello SNI or HTTP Host header, and the wildcard pattern grammar.