Defer iptables provider until iptables.init exists

Tentative fix for https://tickets.puppetlabs.com/browse/MODULES-1341.

On platforms that require it, defer prefetch and caching used by
firewall providers iptables and ip6tables until the firewalld package
is removed and the iptables-services package is installed.