rules: add get-out clause