For example country match in rate limit policy, only allows selection of countries with a limit. thus multiple policies will be required if customer would like to exclude all countries except for a few countries.
for less complication, matcher fields criteria such as these should have a negation option and or a regex option to keep things simpler and easier to manage