Comment 4 for bug 1630832

I think I'd like to see this implemented and improved upon in FWaaS before we adopt it for our SG implementation for a few reasons.

1. It's significantly more code for us to maintain, even without the functional tests the patch is missing.
2. It depends on privsep, which we haven't actually adopted yet in Neutron.
3. It's not clear to me if this ctype use is too runtime specific for deployer flexibility. https://review.openstack.org/#/c/389654/10/neutron_fwaas/privileged/nl_lib.py@86