, break on first matching rule
yaml parser, multiline bash scripts in rule file