feature: if security rule exists, return true