Add top-level auth security rule example