Keep a known-good configuration

Write the loaded (init) configuration to a file (separate from the cron one) Allow the user to set that file as the known-good config Allow the user to specify that next boot, the new rules should be loaded and the known-good config should be loaded as a failsafe after n (=5) minutes. Give the user the option to cancel the known-good load in case the rules are okay.