Two security rules I wrote and deleted, and why the second one was worse

A security ruleset is judged by what it does not flag. Anyone can write a pattern that catches a...