I should have just tested it. The 'rules' strategy won't work due to https://github.com/Katello/katello/blob/master/app/lib/katello/authorization_rules.rb#L36