[rules-users] multi-factor rule