install: apply oo-gear-firewall by default

By default oo-gear-firewall is run to create iptables and selinux
isolation rules. Can be disabled as needed.
Needed to bump ulimit for semanage oo-gear-firewall rules.
install: time/datestamp some slow operations
Merge pull request #472 from sosiouxme/2.2-oo-gear-firewall

install: apply oo-gear-firewall by default