What is the XML rule for veto out-of-scope events?

<rule>    <description>veto out-of-scope events</description>    <comment>When scoping by container, events outside of the ILM Vault containers defined in the above rule will not have a unmatched-src-dn operational property and will be vetoed. If you do not want to use container based scoping, this rule should be modified or removed.</comment>    <conditions>        <or>            <if-op-property name="attempt-to-match" op="not-available"/>            <if-op-property mode="nocase" name="attempt-to-match" op="equal">false</if-op-property>          </or>      </conditions>    <actions>        <do-veto/>      </actions>  </rule>