Suricata

Pushing forward. I think this needed more discussion. It only was a blocking issue in strict mode, which is probably ideal. But worth leaving open for consideration if we do another change like this in a backport.

Rejecting for 7.0. I think this works as designed. In strict mode, we want to identify errors on startup, even if a new patch release warns about an issue that went unnoticed in prior patch releases of that same major version, so users have a chance to fix their stuff.