The 3.2.0 approach

• allow the administrator to specify the rules they want to allow to short-circuit the scan

• more intuitive, since the administrator gets to decide which rules are trustworthy enough

• less "magic" happening out of sight behind the scenes