Add 'additional firewall rules' capability.