No rules should be equivalent with valid-user

This patch is done to work around the issue we have that apache doesn't seem to pass on the requires header on our setup.