Fix using wildcards in protected tags to expose protected variables

See merge request gitlab/gitlabhq!2306