So I think you've missed the meaning of this variable, its not a switch for turning the firewall support off or on, its just a helper to indicate whether the firewall module is supported or not. The switch you are after is `manage_firewall` which is already user configurable and off by default. I think if the firewall module is supported here, it should be just switched on.

If I was you, I'd just leave it on, otherwise enabling firewall requires 2 parameters to be set to `true` which is a little silly.

At the time of my rework I seriously considered dropping this variable for the confusion it creates actually :-/.