In unit-test-security-rules-v9, show should I test an `allow list` rule, like in this example of firestore rules: ``` match /users/{userId}/{allPaths=**} { allow list: if request.auth.token.isAdmin; } ``` In my use-case, I want to allow users to `get` their own info but only admins can `list` everybody. Thanks