Add :delete semantics to iptables rules.

This wipes out all the relevant node attributes before every chef-client
run, so that the firewall rules will be updated if the attributes change
at all.
This is based on the delete-proposal branch.