Setup File Access policy to block all except

Hey
Under global settings, when configure File Access as Custom policy and set Origin policy as:

All Qubes will never be allowed to copy files to All Qubes

Can I set ask/always permission in same rules as exceptions?

Maybe I’m do something wrong but at the moment I should setup Origin policy as Always allowed or Ask in order to prevent via rules same options.
Another wise, their is no “block all except” option.