reader.go removes rule.HasAnyUserOrGroup() test