Rewrite networkacl model to have separate entries for each rule