decode headers (and body) before checking against rules