Rules need to be password protected.
For many reasons different people have access to the NPM server. Considering the amount of time and energy that goes into rule creation I wish there was a way to protect them from unwanted tampering.