Sorry, @Jeff, here is the correct constraint code (thanks @wroos for pointing this out):
regex( . , '^(\d*:?\d+:\d\d)$' ) (also corrected above)
regex( . , '^(\d*:?\d+:\d\d)$' )