What is the difference between putting policy group conditions on the detection tab verses the groups tab?