There is no way to do this short of implementing your own filtering service and installing it in place of the built-in one. The SP has a wildcarding feature to avoid enumerating things and since it will eventually be using the IdP's filtering engine directly and not just the syntax, it's probable that something like that will be introduced. -- Scott