It works so that rules are using only those profile to put online which have set new field IsAutoonlineAllowed enabled. And no, you can't manually put someone online without using an autoonline rule (actually it is possible by using a database query but that is out of scope of the Autoonline module).