pub fn canonical_authorization_selector_rules( rules: &[SelectorRule], ) -> Vec<CanonicalSelectorRule>