added some firewall stuff to the hypervisor role, currently broken