cloudfabric: only install firewall if firewall in use

GDB-671 #resolve