It should be the last rule in case no rules match and by default create the node with the user and permissions declared by the kernel.