Test for firewall class; if on node (via hiera) add SSH firewall.