add python function-level name support for access rules so we can deny access to entire function endpoints w/o regard for the URL