add ability to set all firewall rules atomically

[rzezeski]

From what I recall and what others have said in the past it sounds like we want the ability to be able to set firewall rules atomically. That is, instead of adding/removing individual rules, the sled agent will always present the entire set of rules it wants, expecting that OPTE puts them all in place atomically. Whether or not this scales into the future I am not sure. And I imagine we could at least do some type of delta-based update in the future. But for now the easiest thing is to just give the large atomic hammer of setting/replacing all firewall rules at once.

[rzezeski]

Addressed in 70785d9.