DOC: firewalld distro agnostic