Hi.
I can confirm your problem regarding this issue. Looks like, that internal labels like “cmk/site:mysite” can not use in rulesets. The question is, is there a documented limitation about this? Is there someone at tribe who can clarify this?
Christian