Non-destructive puppet iptables module using augeas