[rules-users] how to ensure that one rule only is executed once?