Make quota come before ypset so ypset can be decoupled from the build
- Make NETWORKING depend on DNS/FIREWALL
- Make local_unbound provide DNS
- Make ipfs, ipfw, and pf provide FIREWALL
- Make securelevel require FIREWALL
- Remove ipfs/ipfilter requirement from netif to avoid circular dependency
  with those services