minimal implementation of Lua policy engine

Unfinished, but safe to merge.

Current state, as far as I can judge: does not break anything when not used; does not break anything when used (assuming the loaded script is free of bugs). TRUNCATE does not work. Example script may not be entirely correct.

Run `git diff master | grep FIXME` to see known issues. Pulls against this pull welcome.