Clarify example of how address groups could be used for individual people
Added incompleted ABNF for iptables to generate tests