[enterprise_filters] handle_when default values