Pay back some of the technical debt in db_col_rule_add(), no logic
changes in this patch, just removing some code duplication.

Signed-off-by: Paul Moore <paul@paul-moore.com>

Creating a transaction can be very time consuming on large filters since we
create a duplicate filter tree iteratively using the rules supplied by the
caller.  In an effort to speed this up we introduce the idea of shadow
transactions where on a successful transaction commit we preserve the old
transaction checkpoint and bring it up to date with the current filter and
save it for future use.  The next time we start a new transaction we check
to see if a shadow transaction exists, if it does we use that instead of
creating a new transaction checkpoint from scratch.

Signed-off-by: Paul Moore <paul@paul-moore.com>