Firewall: Enable auto-update on CI hosts.