If none of these rules match, the call fails. New clusters have all the rules enabled by default. To preserve backward compatible behavior, any existing clusters do not have the first rule enabled by default. If required, you can enable the rule after upgrading.