Add a more obvious note about the use of WAN interface on group rules.