- firewalld: normalize new rich rules before comparing to old ones