Rename the firewall role to ferm, which it actually uses