Should there be an example of a source with `all` and one with a specific user, to demonstrate that the most specific rule matches? (I think that's how it works...)