'*' => 1, # default rule, allow all attributes