Closes gh-23 Adding rules field, used for per-item ACL settings