firewall-manager: make it PDS based