Clarify layer2 by calling an env var rules_to_add.

instead of groups. It was originally used for groups, but now I'm
realizing that I can use the same mechanism also for regex-like suffixes
such as ? + or *.