Which three posture states can be used for authorization rules? (Choose three.)