Remove user and employee from rule context
Having rule customizable per user reduce the cache hit because we have then one cache entry per user. Idem for the employee.
It will be better to have only explicit and used values in the context so the chances to hit the cache are higher.
I do not see use case that rule based on user or employee can not be solved by groups.