When defining a protocol rule, it eludes me why Destination Sets are not part of the configurable options. I want to allow only user at 10.100.1.110 access to a server on the internet outbound over TCP 5900, and I can specify all of this except for binding the protocol rule to the Destination Set. What am I missing?