New implementation of explicitly allowed, explicitly denied.
Return to 'later rules take precedence'. Order of evaluation: bottom-to-top
Added testcase testNoLastRuleTrump