removing firewall and require/before, puppet >=3.4 supported