Effective direct and security-profile controls for this scenario's rule.
Set<ControlId> get controlIds;