Add a util/exec interface for testing execs.
Add a pkg for iptables support

This makes iptables an injectable dependency.  The test for this started off
simple, but got a bit out of hand.  It's starting to become a mocking
framework.
wip