Make NetworkSecurityHook block only if remote doesn't pass any whitelist rule, not the other way around.