Several changes to support dns,firewall, and deduplication when installing broker, node, and console on single host.

I found that the use of a new parameter bind_keyname was useful when dns was an external role and the keyname was not the same as the domain. It was also useful and more consistent to call firewall in the same manner for services as for ports. I also renamed the parameter service to svc to avoid confusion with the resource service. Additionally I renamed firewall to origin_firewall to avoid confusion with the module firewall.