Documentation update (fact examples, added cerit::firewall)