Asgard: more rules for kani-ext-dev
    
    - allow certificate sync access from acme
    - allow reverse proxy access from hel
    - allow shell access from VPN
    
    Signed-off-by: Georg Pfuetzenreuter <georg.pfuetzenreuter@suse.com>