ahammett: firewall verify now a role

easy to reuse