Allow rules are evaluated after deny rules. A request matching any allow rule is
allowed; a request matching no rule is denied by default. Only applies when
restriction_mode is RESTRICTED_ACCESS.
Deny rules are evaluated first. A request matching any deny rule is denied,
regardless of allow rules. Only applies when restriction_mode is RESTRICTED_ACCESS.
Allow rules are evaluated after deny rules. A request matching any allow rule is allowed; a request matching no rule is denied by default. Only applies when restriction_mode is RESTRICTED_ACCESS.