...
- a "description":
Free text to describe the rule - a "command"
- "always": always assign the device (or all if unspecified) to the vm (or none if unspecified), implies "allow" for that vm. Prevents re-assignment to any other VM.
- "default": same as "always", without preventing re-assignment.
- "allow": allow the device (or all if unspecified) to be passed to the vm (or all if unspecified)
- "deny": deny the device (or all if unspecified) to be passed to the vm (or all if unspecified)
- a "device"
See below for sub-nodes - a "vm"
For now, the only valid sub-node is "uuid", to specify the UUID of the VM
...