Assorted ruleset fixes

For user reported bugs.
As I read it, this means only /pub/, /p/, and /.*Checkout support HTTPS. Wouldn't it make more sense to express that positively in the <rule from>, instead of negatively here?