An administrator wants to ensure that a specific security policy rule is applied before all other rules. What should be configured?