Non-safe LLRPCs should block router

This is an alternative approach to https://github.com/kohler/click/pull/155 and also fixes a couple of IPRewriter LLRPCs.