This avoids conflicts with regular IPsec policies. Similarly, use the lowest priority for drop policies.