Yea, add_edit_rule would work best. Just one form key check, having both would probably throw the invalid form error on every attempt. There is also a generic phpBB language string for invalid form that can be used.