Support $firewall parameter (currently unlocks Graphite web port)