This makes it epsilon harder to reason about but saves one chain declaration and one rule per service-port usually.