Unique constraint on (group, rule)