fix secureDNS == secureDns

add more test cases for policy and fix bug