#3521 this should be verified in dry-run, but PFs won't publish their *+dev schemes in dry-run
#3521 for each face needed under m_rules: if it's in oldFaces, add to m_faces and remove from oldFaces; otherwise, create via factory and add to m_faces
#3521 close faces in oldFaces