Add MAC match support to firewall

* Fixes parsing errors and allows defining
  rules with MAC matches. Thanks to Tomasz Głuch
  for pointing the lack of MAC support out.

* Notify neutron-ovs-agent on compute nodes
  to let it clen out saved rules from old and
  removed instances.

Change-Id: Ib82bf37644aaab3b4e794934ddef40593a87fb7d
Partial-Bug: 1308963
Merge "Add MAC match support to firewall" into stable/4.1