Smarter SuSEFirewall proposal during installation

* Don't propose to enable the firewall if SuSEFirewall is not selected for installation (bnc#881250)
* Avoid wacky proposals when possible (bnc#886554)