I've always used addresses and done things like "if a wildcard match of joined-nick is on the protect list, do stuff

Those who fail history are doomed to repeat it