Ordering is important in CODEOWNERS files; the last matching pattern takes the most precedence. Currently, the ssl* pattern which is owned by the security team comes before the * glob owned by the network & observability team. So, when changes are made to an ssl* file, the network and observability team ends up being the required reviewer, rather than the security team.