What should be the rules governing open-records requests?