// no groups, no rules => deny all
{
    "groups": {
    },
    "rules": [
    ]
}