we handle ’[* TO *]’ as a special case since it is common in cookbooks for matching the existence of keys
[Validate]