An AD attribute name and associated match parameter specified for a transport rule must contain at least one non-blank character ...

An AD attribute name and associated match parameter specified for a transport rule must contain at least one non-blank character and may not begin or end with a blank character. An AD attribute with an associated parameter that includes only blank spaces isn't allowed.