Create security-rules.json