Support and tests for "inactive:" IP objects in Juniper ACLs