[extras] update spa-entropy.pl script to point fwknop client in gpg mode to the no-pw homedir
[server] comment additions regarding Coverity low priority TOCTOU issues
[server] minor bug fix to switch iptables comment match check to built-in INPUT chain
[server] minor addition of IPT_CHK_RULE_ARGS macro for iptables -C usage
[server] fix 'Use of untrusted string value' bug found by Coverity

This commit changes iptables policy parsing to re-use rule_exists() for fwknop
jump rule detection instead of using sscanf() against iptables policy list
output.  Also, fwknop jump rules are now deleted from iptables policies in a
loop to ensure all are removed even if there are duplicates (even though this
should not happen under normal circumstances anyway).
Merge branch 'master' of github.com:mrash/fwknop