In order to determine whether a MR-level rule based on a project
level rule is overridden (e.g. name, approvals required, users or
groups have changed), a `overridden` property needs to be returned.

Overridden rules will also be unscoped even if their source rule
is scoped to protected branches.