CHANGE: Eliminated .SetToken() call for MatchType, they now call self.item = and IPMask overrides the setter to do its work.
  ADDED: Check during cascaded cleanup that the sub-item is an instance of RuleBase, otherwise it is skipped for CleanupParsing purposes.