Suricata

Although the documentation already states this (see https://docs.suricata.io/en/latest/rules/config.html#keyword), from the code,
it seems that this should be allowed.

There are also optimization requests that would require this option to exist (cf.: #5643 )