route namespace

design notes for #850

I estimate completing the implementation will take half a day.


-----

UPDATE (from Adam): This took over a day to change it from design to implementation, including hours of pairing, but the estimate was for Jean-Paul alone and I'm slower. There are also a few TODOs with questions about how to continue.

Fixes #850 

I'd go with ASCII unless you have evidence iptables can actually take anything beyond that.