rspec-system tests for rule negation

Signed-off-by: Ken Barber <ken@bob.sh>