default boolean isWildcardedAccount(final String surrogate, final Principal principal, final Optional<? extends Service> service) throws Throwable{
        val accounts = getImpersonationAccounts(principal.getId(), service);
        return isWildcardedAccount(accounts, service);
    }
Is wildcarded account authorized?.

@param surrogate the surrogate
@param principal the principal
@param service   the service
@return true /false
@throws Throwable the throwable
support/cas-server-support-surrogate-api/src/main/java/org/apereo/cas/authentication/surrogate/SurrogateAuthenticationService.java