afwallstart: Switch from iptables_armv5 to iptables
res: Remove old ARM binaries
Api: Clean up iptables/busybox binary selection

Now that we have builtin iptables and ip6tables binaries for all
architectures, allow the user to enable them even if the device is ICS+.
Default is to use the system binaries for ICS+ (as before).