Security Rules, and what they actually permit