Description of problem: When container requires additional rules those needed to be copied to the host rules directory. Please provide registration mechanism to add remove and monitor those rules according to containers present in the system. Please note that those rules required to be aware of the containers users that might not be present on the host.
I am sorry but this does not make sense. Whole point of containers is to have a separate environment in the container, so the containerized app could run everywhere. Maybe you could solve this by bind-mounting dbus socket and rules.d dir to the container and switch off the pid and user namespace.