Current security rules allow the adding of email with the new JS: {
  "rules": {
    "example":{
      ".read": "true",
      ".write": "false",
      "formPosts":{
                "$items":{
                  ".write": "true"
                  }
              }
    },
    "users": {
      "$user": {
        "emailConfirmationContent":{
            ".write": "root.child('users').child( newData.child('uid').val() ).child('lists').child( newData.child('fireFormRepo').val() ).child('emailConfirmation').val() == true",
            ".read":"false"
        },
        "emailNotificationContent":{
            ".write": "root.child('users').child( newData.child('uid').val()  ).child('lists').child( newData.child('fireFormRepo').val() ).child('emailNotification').val() == true",//"newData.child('fireFormRepo').val() == 'r'", //,
            ".read":"false"
        },
        "emailAuth":{".write":"false", ".read":"false"},
        "lists": {
          "$lists" : {
            "emailConfirmation":{".write":"root.child('users').child( auth.uid  ).child('emailAuth').val()==true", ".read":"false"},
            "emailNotification":{".write":"root.child('users').child( auth.uid  ).child('emailAuth').val()==true", ".read":"false"},
            "formPosts":{
                "$items":{
                  ".write": "true"
                  }
              }

            }
          },
        ".read": "$user == auth.uid",
        ".write": "$user == auth.uid"
      }
    }
  }
}