rules are now re-applied after boot