Destination changes to cidrIp (application-security rules)

With release v0.21.0 the application-security rules change to support an IP-Range rather than a single IP. Therefore we drop the property destination and introduce a new cidrIp field, which contains the IPv4 cidr like 1.1.1.1/32. Existing rules will be migrated automatically.