Added "directionality" (column "direction") for policy -- this is
to enable things like servers reaching out to clients through
access-control lists.  (It doesn't change things on real firewalls)