Allow simpler default-only policy definitions.
Sort the rules on output to ensure proper ordering.
Don't create path fact to avoid useless changes when run from command line.