Closes #10: allow read-only access to ref rules