removed the old style firewall stuff in favor of role dependency approach