{
  "rule": {
    "template": "distinguished_name = {% call openssl.section() %}{{ datarules|reverse|join('\n') }}{% endcall %}"
  },
  "options": {
    "required": true,
    "data_source_combinator": "and"
  }
}