option to only force delete fwds

For automatically deleting system domains it seems kinda dangerous to just delete everything on the domain, especially if our automated scripts pick the wrong domain. To prevent disaster let's provide a mode that only deletes forwards.

This will be used in the PuppetMasterItools role.