Two nitpicks: Since we already know this is a firewall module, why not just call it get_config? Also, need a CLI Example.