Explain how a Palo Alto Security Policy is evaluated — top-down rule processing.