Move ferm rules to hiera