Zen of devfs configuration?

Is there an article somewhere on the general intent of
devfs.conf vs devfs.rules?

I'm trying to figure out how to give users access to the
CD-ROM so they can rip audio CDs without suid binaries
or other elevated permissions.

The rule I've got in mind is pretty simple (and works):

# devfs ruleset 10
# devfs rule add path 'acd0t*' mode 0644
# devfs rule applyset
# devfs rule show
100 path acd0t* mode 644

And I want to make it stick on reboot in some "correct"
fashion.

Thx,

-- 
Steve Watt KD6GGD  PP-ASEL-IA          ICBM: 121W 56' 57.8" / 37N 20' 14.9"
 Internet: steve _at_ Watt.COM                         Whois: SW32
   Free time?  There's no such thing.  It just comes in varying prices...