check_filename: tighten dwim-wildcard ambiguity