zirconium: add firewall

Change-Id: Id964c11a85aee4f8c2eed7085bd677199da0ff12