BFT: Check policy update protection works properly

[yacovm]

Make an integration test that adds a new node to the cluster, without a policy change.

Ensure the update is rejected due to the following check.