Fix rule management

The `value` is modified later (with `splice`),
so rules are not immutable, `unsafe-inline` rules
are deleted, if request comes from firefox.

On every request, rules should be cloned.
do not slice the original directives