Complete OC_ADD_RULE patch.

Enforce restrictions on what to build.