Comment 13 for bug 1545717

@Stuart, I agree that what I put in above is ideal state, but we can simplify most of it to two rules (also make modify be admin required):

    "add_metadef_namespace":"rule:admin_required"
    "modify_metadef_namespace":"rule:admin_required",

And doing the same for properties and objects would be okay as well if the my above ideal state is not feasible.