Make firewall management optional

Adds configuration option "manage_firewall" that allows disabling
firewall management completely. Handy for testing and for future
IPA integration work.

Change-Id: I8db1d5528650e24336ad87976459c57c753486a7
Closes-Bug: #1400475
Merge "Make firewall management optional"