When configuring a Decryption Policy Rule, which of the following are available as matching criteria in the rule? (Choose three.)