properly applying the firewall rules per role class on holmium

standardizing the application of the ferm rule into the role class, also
removing more expansive ferm rule granting all sources access

Change-Id: Ia97fa54e3c2017f8985a00371882f8fa3be0a667