pin firewall to 0.11.2 to fix breakage in 0.11.4