Fixed a typo in the network_vifs api
Changed up the destroy_vnic reference test a bit
Moved vnic initializing responsibilities to the scheduler service rather than the hva handler... This is so security groups are initialized immediately after vnics are created. Otherwise it's impossible for sg handler to know which hosts have security groups applied yet and which don't.
Added another test for security groups that reference each other
Removed legacy netfilter
Accept arp for security group rules
Did some code cleanup in netfilter tasks
Implemented the verbose_netfilter option and grouped commands by ebtables/iptables for better readability
Added newline at the end of netfilter handler