Add policy script to suppress non host-certificate logging in x509.log

Addresses BIT-1150