FirewallRules UI implementation. Refs #2705

- Based on CollectionController.
PickObject: search also for interface roles.
PickObject: return create links specific to target field.