Add a pkg for iptables support

This makes iptables an injectable dependency.  The test for this started off
simple, but got a bit out of hand.  It's starting to become a mocking
framework.
podex - DOCKER_HOST envar check
Merge pull request #1620 from jhadvig/podex_envar

podex - DOCKER_HOST envar check
Add the missing arg in Errorf.
Merge pull request #1636 from dchen1107/termination

Add the missing arg in Errorf.
Merge pull request #1637 from lavalamp/fix

Fix 'go vet' issues
Add some documentation for the container environment.
Add codec to restlient test.
Merge pull request #1640 from ddysher/restclient_test

Add codec to restlient test.
Merge pull request #1445 from brendandburns/docs

Add some documentation for the container environment.
Make ResourceVersion a string internally instead of uint64

Allows us to define different watch versioning regimes in the future
as well as to encode information with the resource version.

This changes /watch/resources?resourceVersion=3 to start the watch at
4 instead of 3, which means clients can read a resource version and
then send it back to the server. Clients should no longer do math on
resource versions.
Change test cases to verify the client sends the received resourceVersion
Fix an issue on GetContainerInfo.

I believe the issue was first introduced when we append namespace to docker
container's name. This is a temporary fix for #160.
Merge pull request #1646 from dchen1107/termination

Fix an issue on GetContainerInfo.
Merge pull request #1597 from thockin/iptables

Add a pkg for iptables support
move completions from misc to contrib
make api match intent with less specific type
Merge pull request #1648 from deads2k/dev/deads/tidy-compile-regex-api

make api match intent with less specific type
Merge pull request #1647 from thockin/cleanup

move completions from misc to contrib
update Godeps.json with github.com/elazarl/go-bindata-assetfs