firewalld transaction model