firewall: fix tests for keystone