Why doesn't a detect_protocol(no) rule work for some sites or applications when applied in the VPM?