Route picker in Security Restrict not allowing me to pass query param

The route picker doesn’t seem to work in the security restrict. See video of what happens:

I want to add the school parameter to the login URL.
I have tried to manually type:
/login/{{$_PARAM.school}}
/login/<%= $_PARAM.school %>
login/$_param.school

But all of them simply adds it literally to the url.