remove option dhcp for host.fw
move host policy setting to cluster.fw

Because we also have cluster wide rules
implement API for cluster.fw policy_in and policy_out options