We deprecated entry,always rules a long time ago.  Reject those rules as
invalid.
Signed-off-by: Eric Paris <eparis@redhat.com>