Deny direct resolve should be a single paragraph.

[proofit404]

Instead of multiple entries of the same rule all over the place we should have a single place for this explanation.