ruleset optimizer


combines and reorders rules
without changing meaning, of course

glory details in pfctl_optimize.c