Update scope of private variable to be able to extend CAccessControlFilter 

The actual scope `private` forces us to override `setRules` and `$_rules` variable in order to extend from the class.