Fix product autoproxy rule for demo

TODO: Probably don't want direct reference to public group in product space...need to review post-demo1