In what order are rules applied in a policy?