"Who signed off on your WAF rules" would be a great reverse interview question then.