Support a `log` verdict

[erik-stephens]

May not want every packet to be logged, only specific ones. Support a log option in the configuration that behaves similarly to deny. The default will be log: true.