tls_policy

[Brad Chandler]

I would like to enforce smtp tls for a domain and all of it's subdomains 
except one. For example my tls_policy file would look something like 
this:

.example.com      encrypt
test.example.com  may
Will this work? Is there a particular order the records should be in?