got rid of access-rule, improved handling for multiple rule sets
updated tests