firewalld: support default_zone