Comment 11 for bug 1502297

There is one other optimization that we could possibly do where we keep track of which chains we modify and then use that to intelligently filter out the rules we are interesting in checking the changes on.

However, it's not clear how much performance it will gain us from the get-go so I would only like to dig into it if operators still feel the performance is not satisfactory.