pub fn require_any_of<T>(resources: T) -> AccessRuleNode