FORWARD for .onion suffix cannot be enabled
I might be wrong, but it seems that it's not possible to allow requests for .onion resources, at least the following construction is not working:
policy.add(policy.suffix(policy.FORWARD({'IP'}), policy.todnames({'onion'})))
I guess this is because special policies take precedence over specified in the configuration file.