[firewall] Moves firewall preferences to separate recipe