Unfortunately I only have a CDPUserSvc_with random suffix which changes every restart, so creating a firewall rule for it (either Allowing or Denying) seems impossible.
Do you know why the wildcard rules aren't allowed? Would they consume too many CPU cycles to parse?