normalized list of rules in Authorize module