fsm: Add ni_fsm_exists_applicable_policy()
nanny: schedule recheck on new device when policy exists