Refactor user-node up/down scripts using ufw commands

[sarnold]

This depends partly on ufw support for packet marking and routing marked packets; alternative is possibly a combination of ufw rules and zt network rules/capabilities (needs spelunking/research time).