How are security policies evaluated on Azure Application Gateway Web Application Firewall (WAF) when you use both globlal WAF policy and per-site WAF policy?