We should have a class that does this, like ::oaeservice::firewall::ssh