Fixed comment
Added managed hosts to generate ACLs for servers.

Syntax example
host:h = {
 ip = 1.2.3.4;
 model = Linux;
 managed;
 hardware = eth1;
}

This creates a file "host:h" with IPTables rules in out-directory.
Add "-A INPUT -j ACCEPT -i lo" for iptables.
Fixed non-determinism when processing aggregates.