Allowing the rules.d dir is insufficient, need to allow file