unordered versions of combining algorithms

Hi,
I have a question regarding the unordered versions of certain
combining algorithms (deny-overrides, for instance). Does the
specification intend to leave it to the implementation with regards to
the way in which rules/policies are fetched from the list (the sun's
impl. does an ordered fetching even for the unordered versions).

Thanks,
karthik