Added 'wrapper'

During development it's difficult to see the fatal messages produced
by net-policy (e.g. missing import, syntax error, etc).

Welcome 'wrapper' - it runs the script (e.g. net-policy) and syslogs
all the standard output and errors (stdout, stderr) and then exits
with the same exit code as the script.

Excellent for scripts that run without stdout/stderr available.
Merge branch 'master' of git+ssh://github.com/mludvig/net-policy
Removed hardcoded iptables stuff, switched from net-policy LDAP to posixGroup
Removed unused LDAP Net-Policy schema
Replaced LDAP-based group lookup with pwd/grp-based
Added SELinux policy to allow calling /usr/sbin/ipset
Implement "push route" from IPSET

Read networks from IPSETs for a given group and send to client
as "push route" options.