Make "Apply with excluded domains" work

[kkebo]

I found that our current implementation was not sufficient to make the "Apply with excluded domains" feature work. According to here, we have to use NEOnDemandRuleEvaluateConnection and NEEvaluateConnectionRule.

Originally posted by @kkk669 in https://github.com/kkk669/DNSecure/discussions/46#discussioncomment-1354023