I use a combination of individual Ask/Block rules for each application and service, in addition to more general ask/block rules for the Application hierarchy. I also use Global rules.
Great, thanks for clarifying. This is all still new to me, and still a lot to learn. Two pages of hand-written questions from this thread alone.