added vshield_nat, fix ha issue

* add vshield_nat
* fix ha issue where 2 runs would be needed to update all appliance datastores