Add negative condition groups to rules

Rule groups now include Match unless all of these are true and Match only if none of these are true. Use these options to exclude a particular combination of conditions or require that every listed condition be absent.

These groups can be nested with the existing Match all and Match any groups for more precise traffic rules. Requires FlowGuard Proxy v0.5.0 or newer.