rules:
- "**": [iframe-credentialless]
