Make ordering of renegociation detection more natural.

The use of `-I` built a chain were the rules were in reversed
order. This may be confusing when not paying attention. Use `-A` instead
and fix ordering. With an incorrected ordering, while in state `2` we
match immediatly the hashlimit rule.