Add description of have_iptables_rule matcher and tiny fixes