I am having a hard time understanding the relationship between custom config rules and how they are actually evaluated/triggered. For example, when a managed config is triggered