(and I'm copying that same tweak over to GCE's Firewall.Rule, where this snippet came from)