Suricata

Exception policy scenarios such as defrag.memcap and flow.memcap are, according to our documentation,
only susceptible to packet-related exception policies.

Ensure that bypass isn't applied to those. Check all other cases, as well.

Decide what should be done for 7.