changing how firewall rules are injected on compute nodes