Track mode fopen() calls.
Inspect: Also dump file/glob signatures.
Don't disable the tool as it falls back to build file.
Give DefRule instances the chance to preprocess Data

This happens before validation.