Use the default policy type for redirects matching both allow and deny user rules instead of prioritising deny.