Smarter SuSEFirewall proposal during installation

* Don't propose to enable the firewall if SuSEFirewall is not selected for installation (bnc#881250)
* Avoid wacky proposals when possible (bnc#886554)
btw, should I add a call to ```publish```for the new ```prepare_proposal``` method?