CLOUDSTACK-3864: Fix test_blocker_bugs.py for firewall

Currently we're using enable/disable static nat rather than create IP forwarding
command. The list of StaticNAT won't work.

Also change to use API to verify the rules rather than look into db directly.
CLOUDSTACK-3964 Change permissions on vm router vmdata script
Submitted-by: Toshiaki Hatano