add puppetlabs-firewall as a submodule