Smarter SuSEFirewall proposal during installation

* Don't propose to enable the firewall if SuSEFirewall is not selected for installation (bnc#881250)
* Avoid wacky proposals when possible (bnc#886554)
Not new code, in fact (just moved), but I'll fix it. Thanks.