Added support for firewall load modes

The most interesting mode is atomic which uses iptables-restore to make atomic
commits to the kernel per table.

See bearwall.conf for details of the modes and what they do.