pub fn require_all_of<T>(resources: T) -> AccessRuleNode