Set a flag to enable firewall
Make the fw class only load when the flag is set and test disable for puppet2 host