More updates to firewall to fix compute node

the puppetlabs firewall isn't entirely compatible
with libvirt. This change stops libvirt, purges its rules,
then applies the puppet firewall before restarting libvirt.
It's a bit of a hack that mostly works.