fixed make_banmask (do not use a single * as zero auth mask)