Policy should deny any network security rules that allow port 22

Question

I am trying to create a policy that denies the NSG rules that allows port 22. The expected outcome is for azure to deny any NSG security rules that allows port 22. Here is what