Document setting a whitelist firewall ruleset on the Master
Module compound matcher

compound matcher based on return value of module return