Suricata

The files.rules we ship was always meant to be an example, but many ppl seem to use it directly.

We should at least use a proper sid range, but maybe we can also consider adding more and more useful examples.