Add support for removing entries.

go-fw-helper now can clean up, assuming UPnP is used.  Technically the
code is present for NAT-PMP, but it can misbehave badly on certain
routers due to firmware bugs.