User ACLs: Add counters for ACLs

[qmonnet]

... so that we can track how many packets we allow or drop with ACLs.

Reported by Fredi.

To clarify: scope for the counters (per-rule, or global?)