hafnium: add firewall

Change-Id: I959a83c72d3a8f68c9ced65d1ee4259e627d7e66