rule r1 deny regex 'select'
users %@% match any rules r1