Policy compliance rule containing multiple matches / maybe use lua function?