luci-base: validation.js: optionally support negative prefixes