clean up logic, fix some rules, add explicit returns
abstraction of allow/deny rules allowing a simple declarative syntax
Merge pull request #2 from ongoworks/pubsec

Publication and security allow/deny review, fixes, and simplification