{allow, {ipaddr, "127.0.0.1"}, subscribe, ["$SYS/#", "#"]}.

{allow, {user, "testuser"}, subscribe, ["a/b/c", "d/e/f/#"]}.

{allow, {user, "admin"}, pubsub, ["a/b/c", "d/e/f/#"]}.

{allow, {client, "testClient"}, subscribe, ["testTopics/testClient"]}.

{allow, all, subscribe, ["clients/%c"]}.

{allow, all, pubsub, ["users/%u/#"]}.

{deny, all, subscribe, ["$SYS/#", "#"]}.

{deny, all}.