Don't use only_if on firewall_rule as it's a definition