Add a util/exec interface for testing execs.
Add a pkg for iptables support

This makes iptables an injectable dependency.  The test for this started off
simple, but got a bit out of hand.  It's starting to become a mocking
framework.
kubcfg hack - remove me
Add master plumbing for ip-per-service
Use '=' for flags or else parsing gets confused sometimes
WIP: tests are broken