Ensure default IP policy on subnets

* Added API validation
* Added database migrations

RM7212