Suricata

Suricata 4.1 started to install the engine provided rules to /usr/share/suricata/rules as part of the normal make install process, however "make install-rules" continued to install the rules to /etc/suricata/rules which is something we want to move away from.

The issue here is to no longer install engine provided rules to /etc/suricata/rules under any circumstance. Currently a "make install-rules" will run Suricata-Update if it is bundled, otherwise it will fallback to the old behaviour and install the engine provided rules to /etc/suricata/rules, then expand the ET open ruleset into this directory. None of which is very management in the future, and doesn't update the engine provided rules on update.

This will not change the behaviour for 4.1 rules using the release package as this is the behaviour they already got as Suricata-Update is bundled. This is just to make the experience consistent between bundled and non-bundled Suricata-Update builds of Suricata.