First implementation of Advanced Firewalling

This pull-request is for now a PoC.
Do not merge it, it will require design discussion about implementation.

Here is a summary:
* Update Puppet references for puppetlabs-firewall module to the last commit
* Implement Basic Firewalling:
  * Implement (optionally) Firewalling with IPtables
  * Create pre & post defaults IPtables rules
  * Allow to push custom IPtables rules
  * Unit tests with basic & advanced firewalling
* Configure firewalling for Glance API service by allowing 9292 tcp
Doesn't `$manage_firewall` fit better here? Like the convention `$manage_package`, `$manage_service` etc..