Fixes #499: Decoupled `Rule` from RBAC `Item`