Use underscore convention for "unexported" rules

[anderseknert]

If a rule uses the underscore convention for "private" rules (i.e. _foo := "bar") , we should warn if that's not used within the same policy, or imported / referenced from another policy.