Security rules for managing users.