Currently, sadow mode (aka dry mode) is controleld by a single switch that sets an environemnt variable that controlls the behavior of the ratelimit service. Instead, we want to be able to specify where a given ratelimit policy should be in dry mode or enforced. That would be implemented by setting the sadow_mode flag on all rules generated by the policy.