Thanks. You're right, using the * instead of the + allows the regex to return true if the string is blank. I did want to be sure that string contained at least one of the allowed characters.

$string =~ /^(?:([smtwhfa])(?!.*\1))+$/
[download]