Priority Order (least to highest):
- Global Denied - Broadest restrictions
- Global Allowed - Can override global denied
- Connection Denied - More specific restrictions
- Connection Allowed - Most specific, can override everything
- Default: Allow - If no rules match, command is allowed
Note: You can use regex patterns by wrapping them in forward slashes, e.g., /^rm\s+-rf/ or /^sudo\s+/i (case-insensitive).