add Policy.filter_by_host