
SMALL:
- finish commands load() and exec()
- '-x' dangerous commands (exec quit load?)
- change cache options (no-ignore-size und cache-rlocal)
- timeout for DNS queries

MEDIUM:
- time based rules
- log matched items (if matched syslog $HITS{$attrid}) 

HUGE:
- ACLs

