code: function setRules (rules) {
      debug('set rules', rules)
      // require array
      assert.ok(Array.isArray(rules), 'rules array required')
      // add each rule
      _.each(rules, rule => this.setRule(rule))
  }
docs: @function setRules
  
  set access control rules. rules must be array of strings. error will be
  thrown on invalid rule.
  
  @param {array} rules
  
  @throws {Error}