fn deny_all_rules() -> Arc<RestrictedRules> ⓘ
Rules that reject both placement and pickup, shared process-wide.