Control use of HostDir

A flag on kubelet and apiserver controls use of the HostDir volume type.
Default is to allow since there may be existing use cases.
When prohibited, pods that request HostDir will fail validation.
question for reviewers: should a new validation type be introduced for forbidden, or requires capability rather than invalid.  Because it is valid for some clusters.