add ClientConnectPolicy config option

There should be a config option called ClientExitPolicy which specifies which destinations clients are allowed to build circuits to. The default value should be "accept :".

This will deprecate the RejectPlaintextPorts option as it will be able to provide the same functionality.

I am beginning to work on a patch for this.