change the way we do firewalld config, it's the least hacky option I could think of that actually works