support multiple addresses in daf src/dst filter

This enables using syntax like "src { CIDR-a CIDR-b } deny" to specify
multiple addresses to filter. All the conditions are ORed together
like qname/ns.
27 jobs from cflare-daf-policy in 5 minutes and 37 seconds (queued for 9 seconds)
latest
Status Job ID Name Coverage
  Build
passed #203676
docker linux amd64
build:clang:linux:amd64

00:01:28

passed #203675
docker linux amd64
build:linux:amd64

00:01:28

passed #203677
docker linux amd64 allowed to fail
srpm

00:00:27

 
  Test
passed #203685
docker linux amd64
deckard:linux:amd64

00:01:03

passed #203691
privileged
distro:epel-7

00:01:54

passed #203690
privileged
distro:fedora-29

00:02:36

passed #203684
docker
doc

00:00:36

passed #203682
dind
docker:build

00:02:05

passed #203683
docker linux amd64
installcheck:linux:amd64

00:00:49

passed #203686
docker linux amd64
installcheck:valgrind:linux:amd64

00:01:33

passed #203679
docker
lint:c

00:02:13

passed #203680
docker
lint:clang-scan-build

00:00:50

passed #203678
docker
lint:lua

00:00:26

canceled #203687
docker
osx:build

passed #203689
docker linux amd64
respdiff:iter:udp:linux:amd64

00:02:05

passed #203681
docker linux amd64
test:linux:amd64

00:00:47

passed #203688
docker linux amd64
test:linux:amd64:valgrind

00:01:00

 
  Respdiff
skipped #203692
respdiff
respdiff:fwd-tls6-kresd.udp6
skipped #203693
respdiff
respdiff:fwd-udp6-kresd.udp6
skipped #203697
respdiff
respdiff:fwd-udp6-unbound.tcp6
skipped #203698
respdiff
respdiff:fwd-udp6-unbound.tls6
skipped #203696
respdiff
respdiff:fwd-udp6-unbound.udp6
skipped #203695
respdiff
respdiff:iter.tls6
skipped #203694
respdiff
respdiff:iter.udp6
skipped #203699
respdiff
resperf:fwd-tls6.udp-asan
skipped #203700
respdiff
resperf:fwd-udp6.udp-asan
skipped #203701
respdiff
resperf:iter.udp-asan