Added (a) changes to support "direction" of a flow.  This doesn't matter
much for "real" firewalls - but access-lists we need to generate the
reverse policy.

Added (b) a function to "clear" the existing rendered S/D/P sets - this is
probably the best way to do a "full update" of the entire SDP database.
cleanup of unused policy database files