Which step is unnecessary when an administrator creates an application rule set?