reordered transition functions for clarity
hasing based on string representation of flec predicate
added support for FSMPolicy that only have default behavior for certain flecs (indicated by using None as the flec predicate)
added stateful firewall app (first pass, no timeouts)