Thanks so much for your response. I think I understand the problem, based on your explanation, and I've updated the rule. However, when I commit the rule I'm told there's a Kerberos and web-browsing dependency. Should I be adding these to the rule as well?