Add a util/exec interface for testing execs.

Peeled off from ip-per-service
iptables makes a bunch of syscalls.  I literally need to make sure that some specific set of commands was run.  Deeper correctness testing will have to come from an e2e test, no way around it.