/action=[create-user] group=[(admin|superadmin)]/	Allow admins and superadmins to create users
/action=[delete-user] group=[(super)?admin]/		Allow admins and superadmins to delete users
/action=[login] group=[user]/				Allow users to login
/action=[send-mail] group=[user] dow=[(mon|tue|wed|thu|fri)]/	Allow users to send mail during the work week
/action=[login-app] group=[(super-)?admin] ip=[1.2.3.\d{1,3}] dow=[.*]/	Allow superadmins to login to the app from 1.2.3.0/24
/account=[.*?@.*.adm] action=[login-mac] group=[(super-)?admin]/	Allow mac access to superadmins