Firewall Rules Are Meant to Be Managed, Not Broken