When an ExpressRoute circuit and a VPN Gateway coexist in the same VNet, which connection type takes precedence for on-premises traffic by default?