network-manager: add firewalld