policydslapi converts restrict rules to alloy predicates