Abstracting network policies