How is policy services node redundancy achieved in a deployment?