Comment 2 for bug 1659440

Turns out, this patch seems to have resolved the problem.
https://review.openstack.org/#/c/416777/

I guess it has something to do with synchronizer interrupting the rule insertion (the new lock prevents that). But I still can't explain the buggy behavior observed.