Transactional iptables management for puppet