Per-user firewall rules