FirebaseByChild Security Rules

Given the firebase setup with dinosaur example, I would like to add a security rule for .read. If I add: .read: true in the hierarchy as shown below, the query produces no results.

{
  "rules": {
    "dinosaurs": {
      "$dino": {
        ".read":true
      }
    }
  }
}

      

        
        
        
      

    

If I use the following queries, it works as expected.

{
  "rules": {
    "dinosaurs": {
        ".read":true
    }
  }
}

      

        
        
        
      

    

In my use case, I need a setting more similar to the first example so that I can check each item for state before allowing that item to be read. To use the new style query orderByChild ("property"), it looks like I need to allow access to the entire subtree. Is this the case?